LayoutTests/js/script-tests/dfg-allocation-profile-watch-point-exit.js

description(
"Checks that if a DFG AllocationProfileWatchpoint fires and the callee is otherwise dead, we still preserve the callee for the bytecode and don't crash."
);

function Foo() {
    this.f = 42;
}

function foo() {
    return new Foo().f;
}

silentTestPass = true;
noInline(Foo);

for (var i = 0; i < 100; i = dfgIncrement({f:Foo, i:i + 1, n:90})) {
    if (i == 95)
        Foo.prototype = {foo: 62};
    shouldBe("foo()", "42");
}