Updates:
Status: Accepted
Comment #7 on issue 3183 by [email protected]: "Object #<Object> has no
method push" on Array after deoptimization
http://code.google.com/p/v8/issues/detail?id=3183
I reduced the bug from DEOPT, thanks for it, Oleg! IR is not needed.
var a = [];
function bar(x) { a[true ? 'push' : 'push']([x]); }
function foo() { bar(arguments[0]); }
function baz() { foo("x"); }
baz();
baz();
%OptimizeFunctionOnNextCall(baz);
baz(); // Throws: TypeError: Object [object global] has no method 'push'
(The issue does not happen on bleeding_edge but hydrogen produced for bar()
is wrong: we still build an indexed invocation!)
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
