| description( |
| "This tests that function inlining in the DFG JIT doesn't get confused about the global object to use for array allocation." |
| ); |
| |
| window.jsTestIsAsync = true; |
| |
| function foo() { |
| return new Array(1000); |
| } |
| |
| Array.prototype.thingy = 24; |
| |
| function done(value) { |
| var expected = 24 + 1000; |
| if (value == expected) |
| testPassed("done() called with " + expected); |
| else |
| testFailed("done() called with " + value + ", but expected " + expected); |
| finishJSTest(); |
| } |
| |
| function doit() { |
| document.getElementById("frameparent").innerHTML = ""; |
| document.getElementById("frameparent").innerHTML = "<iframe id='testframe'>"; |
| var testFrame = document.getElementById("testframe"); |
| testFrame.contentDocument.open(); |
| |
| code = "<!DOCTYPE html>\n<head></head><body><script type=\"text/javascript\">\n"; |
| code += "Array.prototype.thingy = 42;\n"; |
| code += "function bar() {\n"; |
| code += " return window.parent.foo();\n"; |
| code += "}\n"; |
| code += "window.parent.noInline(bar);\n" |
| code += "while (!window.parent.dfgCompiled({f:bar}))\n"; |
| code += " bar();\n"; |
| code += "var result = 0;\n"; |
| code += "var theArray = bar();\n"; |
| code += "result += theArray.thingy + theArray.length;\n"; |
| code += "window.parent.done(result);\n"; |
| code += "</script></body></html>"; |
| |
| testFrame.contentDocument.write(code); |
| testFrame.contentDocument.close(); |
| } |
| |
| window.setTimeout(doit, 10); |
| |