Function Assign2

deps/v8/test/mjsunit/readonly.js:238–240

(o, x)

// Extra test forcing bailout.

function Assign2(o, x) {
  o.a = x;
};
%PrepareFunctionForOptimization(Assign2);
(function() {
var p = CreateFromConstructor(Object.prototype)();