cc805e42af
The limit needs to be checked before casting the length to int in ModuleWireBytes. R=titzer@chromium.org BUG=694433 Review-Url: https://codereview.chromium.org/2705233002 Cr-Commit-Position: refs/heads/master@{#43352}
7 lines
268 B
JavaScript
7 lines
268 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
var size = 0x40000000;
|
|
assertThrows(() => WebAssembly.validate(new Uint16Array(size)), RangeError);
|