summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js
diff options
context:
space:
mode:
Diffstat (limited to 'js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js')
-rw-r--r--js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js44
1 files changed, 44 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js b/js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js
new file mode 100644
index 0000000000..01b5745cc7
--- /dev/null
+++ b/js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-1.js
@@ -0,0 +1,44 @@
+// Tests when JSOP_OPTIMIZE_SPREADCALL no longer apply after the initial Ion
+// compilation.
+
+// JSOP_OPTIMIZE_SPREADCALL can be optimised when the following conditions
+// are fulfilled:
+// (1) the argument is an array
+// (2) the array has no hole
+// (3) array[@@iterator] is not modified
+// (4) the array's prototype is Array.prototype
+// (5) Array.prototype[@@iterator] is not modified
+// (6) %ArrayIteratorPrototype%.next is not modified
+
+function add(a, b) {
+ return a + b;
+}
+
+// The rest argument is overwritten with a non-Array object.
+function test() {
+ var badRest = {
+ *[Symbol.iterator]() {
+ yield 3;
+ yield 4;
+ }
+ };
+ function maybeInvalidate(rest) {
+ // Use a WithStatement to prevent Ion-inlining. This ensures any
+ // bailouts due to type changes don't occur in this function, but
+ // instead in the caller.
+ with ({});
+
+ if (i >= 1900) {
+ return badRest;
+ }
+ return rest;
+ }
+ function fn(...rest) {
+ rest = maybeInvalidate(rest);
+ return add(...rest);
+ }
+ for (var i = 0; i < 4000; ++i) {
+ assertEq(fn(1, 2), i < 1900 ? 3 : 7);
+ }
+}
+test();