15bf3ae5e1
R=cbruni@chromium.org BUG=v8:7438 Change-Id: I2359ff08f0c37c683bbcb164eb3120539d2bb124 Reviewed-on: https://chromium-review.googlesource.com/939468 Reviewed-by: Camillo Bruni <cbruni@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#51605}
32 lines
602 B
JavaScript
32 lines
602 B
JavaScript
// Copyright 2018 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --expose-gc
|
|
|
|
const f = eval(`(function f(i) {
|
|
if (i == 0) {
|
|
class Derived extends Object {
|
|
constructor() {
|
|
super();
|
|
${"this.a=1;".repeat(0x3fffe-8)}
|
|
}
|
|
}
|
|
return Derived;
|
|
}
|
|
|
|
class DerivedN extends f(i-1) {
|
|
constructor() {
|
|
super();
|
|
${"this.a=1;".repeat(0x40000-8)}
|
|
}
|
|
}
|
|
|
|
return DerivedN;
|
|
})`);
|
|
|
|
let a = new (f(0x7ff))();
|
|
a.a = 1;
|
|
gc();
|
|
assertEquals(1, a.a);
|