diff options
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-crbug-816961.js')
-rw-r--r-- | deps/v8/test/mjsunit/regress/regress-crbug-816961.js | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-crbug-816961.js b/deps/v8/test/mjsunit/regress/regress-crbug-816961.js new file mode 100644 index 0000000000..c1637ad2c5 --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-crbug-816961.js @@ -0,0 +1,18 @@ +// Copyright 2018 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +assertThrows(function() { + var memory = new WebAssembly.Memory({initial: 64 * 1024 * 1024 / 0x10000}); + var array = new Uint8Array(memory.buffer); + Uint8Array.of.call(function() { return array }, + {valueOf() { memory.grow(1); } }); +}, TypeError); + +assertThrows(function() { + var memory = new WebAssembly.Memory({initial: 64 * 1024 * 1024 / 0x10000}); + var array = new Uint8Array(memory.buffer); + Uint8Array.from.call(function() { return array }, + [{valueOf() { memory.grow(1); } }], + x => x); +}, TypeError); |