<html>
    <head>
      <base href="https://bugs.webkit.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - OSR exit loop for InBounds HasIndexedProperty that exits because of holes"
   href="https://bugs.webkit.org/show_bug.cgi?id=233596">233596</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>OSR exit loop for InBounds HasIndexedProperty that exits because of holes
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>WebKit
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>WebKit Nightly Build
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P2
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>JavaScriptCore
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>webkit-unassigned@lists.webkit.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>sbarati@apple.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Something like this is an exit loop in "func":

function test1() {
    function func(o) {
        return 0 in o;
    }
    noInline(func);

    let o = {__proto__:[0, 1]};
    o[2] = 4;

    for (let i = 0; i < 10000; ++i) {
        func(o);
    }
    assert(func(true, o));
}
test1();</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>