16 lines
309 B
JavaScript
16 lines
309 B
JavaScript
|
// Copyright 2017 the V8 project authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
// Flags: --verify-heap
|
||
|
|
|
||
|
|
function f(o, v) {
|
||
|
|
try {
|
||
|
|
f(o, v + 1);
|
||
|
|
} catch (e) {
|
||
|
|
}
|
||
|
|
o[v] = 43.35 + v * 5.3;
|
||
|
|
}
|
||
|
|
|
||
|
|
f(Array.prototype, 0);
|