AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

Add regression test for http://crbug/1206289

Browse Source 
Bug: chromium:1206289
Change-Id: Ib0cc2a0d159b763efa4fe33502b0a6562973b430
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3429501
Reviewed-by: Lutz Vahl <vahl@chromium.org>
Commit-Queue: Lutz Vahl <vahl@chromium.org>
Cr-Commit-Position: refs/heads/main@{#78899}
This commit is contained in:
Emanuel Ziegler 2022-02-01 18:56:31 +01:00 committed by V8 LUCI CQ
parent 638efefba2
commit 9f7cbe9b4e
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
test/mjsunit/regress/regress-crbug-1206289.js Normal file
View File

@ -0,0 +1,22 @@
// Copyright 2021 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --expose-gc --stress-flush-bytecode
function outer() {
function asm_broken(a, import_obj) {
"use asm";
// import_obj is expected to be an object and this causes
// asm_wasm_broken to be set to true when instantiating at runtime.
var v = import_obj.x;
function inner() {
}
return inner;
}
var m = asm_broken();
}
assertThrows(outer);
gc();
assertThrows(outer);