v8/test/mjsunit/regress/regress-crbug-505778.js

// Copyright 2015 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

if (this.Worker) {
  var __v_7 = new Worker('onmessage = function() {}');
  __v_7.postMessage("");
}
Fix cluster-fuzz found regression in d8 Workers v8::Internal::List will DCHECK when indexing out of the array, even if just to get the address, and the value is never used. So this construct will fail: memcpy(p, &data[0], length); When data is empty and length is 0. BUG=chromium:505778 R=mstarzinger@chromium.org LOG=n Review URL: https://codereview.chromium.org/1216853003 Cr-Commit-Position: refs/heads/master@{#29388} 2015-06-30 16:48:58 +00:00			`// Copyright 2015 the V8 project authors. All rights reserved.`
			`// Use of this source code is governed by a BSD-style license that can be`
			`// found in the LICENSE file.`

			`if (this.Worker) {`
Change d8 Worker API so it takes a string instead of a function. This is more consistent with the DOM API, and is clearer w.r.t. which values are available in the lexical environment of the Worker. BUG=chromium:497295 R=jarin@chromium.org LOG=n Review URL: https://codereview.chromium.org/1218553004 Cr-Commit-Position: refs/heads/master@{#29426} 2015-07-01 16:41:48 +00:00			`var __v_7 = new Worker('onmessage = function() {}');`
Fix cluster-fuzz found regression in d8 Workers v8::Internal::List will DCHECK when indexing out of the array, even if just to get the address, and the value is never used. So this construct will fail: memcpy(p, &data[0], length); When data is empty and length is 0. BUG=chromium:505778 R=mstarzinger@chromium.org LOG=n Review URL: https://codereview.chromium.org/1216853003 Cr-Commit-Position: refs/heads/master@{#29388} 2015-06-30 16:48:58 +00:00			`__v_7.postMessage("");`
			`}`