1 // Copyright 2015 the V8 project authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 // Flags: --allow-natives-syntax --enable-slow-asserts 6 7 Array.prototype.__proto__ = null; 8 var func = Array.prototype.push; 9 var prototype = Array.prototype; 10 function CallFunc(a) { 11 func.call(a); 12 } 13 function CallFuncWithPrototype() { 14 CallFunc(prototype); 15 } 16 CallFunc([]); 17 CallFunc([]); 18 %OptimizeFunctionOnNextCall(CallFuncWithPrototype); 19 CallFuncWithPrototype(); 20
