summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/ion/monomorphic-inlining.js
blob: 608d10917d350c9cfc82e0211dc1f57af2a643ae (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
// |jit-test| --ion-offthread-compile=off;

function foo(f, a, b) {
  return f(a, b);
}

function bar(a, b) {
  let result = a + b;
  if (result >= fns.length) {
    return b + a;
  }
  return result;
}

function baz(a, b) {
  return a + b;
}

let fns = [];

// This is pretty fiddly. What we are trying to test here is a specific path
// in the bailout code which needs to know which ICScript to load, and has to
// decide between the script's own ICScript, or the trial-inlined ICScript
// which belongs to the outer script. It uses the ICFallbackStub's
// trialInliningState to make this decision, which can change out from
// underneath us if the inlined call fails. So what were doing here is getting
// into a state where we've monomorphic inlined a function, and gone to Ion
// with it. We then cause the inlined call to fail by calling a function which
// doesn't match what we expect, which transitions us to a failed
// trialInliningState. We then will bail out *inside* bar, due to the
// previously unseen inside of the result >= fns.length check, exercising the
// bailout code in question.
for (let i = 0; i < 2000; i++) {
  fns.push(bar);
}

fns.push(baz);
fns.push(bar);

for (let i = 0; i < fns.length; i++) {
  assertEq(foo(fns[i], i, 1), i + 1);
}