summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/ion/spreadcall-not-optimized-dynamic-5b.js
blob: 37ce077723b7fe51f73faa8ac6ce9ec09b9b3e9b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
// Tests when JSOP_OPTIMIZE_SPREADCALL no longer apply after the initial Ion
// compilation.

// JSOP_OPTIMIZE_SPREADCALL can be optimised when the following conditions
// are fulfilled:
//   (1) the argument is an array
//   (2) the array has no hole
//   (3) array[@@iterator] is not modified
//   (4) the array's prototype is Array.prototype
//   (5) Array.prototype[@@iterator] is not modified
//   (6) %ArrayIteratorPrototype%.next is not modified

function add(a, b) {
    return a + b;
}

// Array.prototype[@@iterator] was modified.
function test() {
    function maybeInvalidate() {
        // Use a WithStatement to prevent Ion-inlining. This ensures any
        // bailouts due to type changes don't occur in this function, but
        // instead in the caller.
        with ({});

        if (i === 1900) {
            var ArrayPrototypeIterator = Array.prototype[Symbol.iterator];
            Array.prototype[Symbol.iterator] = function() {
                return ArrayPrototypeIterator.call([3, 4]);
            };
        }
    }
    function fn(...rest) {
        maybeInvalidate();
        return add(...rest);
    }
    for (var i = 0; i < 4000; ++i) {
        assertEq(fn(1, 2), i < 1900 ? 3 : 7);
    }
}
test();