blob: 44ce67fd5d3cec6a076f218b35d9a3a1624503bc [file] [log] [blame]
description(
"This tests that function inlining in the DFG JIT doesn't get confused about the global object to use for array allocation."
);
window.jsTestIsAsync = true;
function foo() {
return new Array(1000);
}
Array.prototype.thingy = 24;
function done(value) {
var expected = (24 + 1000) * 200;
if (value == expected)
testPassed("done() called with " + expected);
else
testFailed("done() called with " + value + ", but expected " + expected);
finishJSTest();
}
function doit() {
document.getElementById("frameparent").innerHTML = "";
document.getElementById("frameparent").innerHTML = "<iframe id='testframe'>";
var testFrame = document.getElementById("testframe");
testFrame.contentDocument.open();
code = "<!DOCTYPE html>\n<head></head><body><script type=\"text/javascript\">\n";
code += "Array.prototype.thingy = 42;\n";
code += "function bar() {\n";
code += " return window.parent.foo();\n";
code += "}\n";
code += "var result = 0;\n";
code += "for (var i = 0; i < 200; ++i) {\n";
code += " var theArray = bar();\n";
code += " result += theArray.thingy + theArray.length;\n";
code += "}\n";
code += "window.parent.done(result);\n";
code += "</script></body></html>";
testFrame.contentDocument.write(code);
testFrame.contentDocument.close();
}
window.setTimeout(doit, 10);