diff options
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-crbug-575314.js')
| -rw-r--r-- | deps/v8/test/mjsunit/regress/regress-crbug-575314.js | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-crbug-575314.js b/deps/v8/test/mjsunit/regress/regress-crbug-575314.js new file mode 100644 index 0000000000..7a5bd4eb70 --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-crbug-575314.js @@ -0,0 +1,15 @@ +// Copyright 2014 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +// Flags: --allow-natives-syntax + +// https://code.google.com/p/chromium/issues/detail?id=575314 + +// Overwriting the constructor of a Promise with something that doesn't have +// @@species shouldn't result in a rejection, even if that constructor +// is somewhat bogus. + +var test = new Promise(function(){}); +test.constructor = function(){}; +Promise.resolve(test).catch(e => %AbortJS(e + " FAILED!")); |