ebc9556108
Bug: v8:11111,chromium:1362487 Change-Id: Ifc7649ec945a0cb13e02c52a47f8ab68fa8ab848 Fixed: chromium:1362487 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3890915 Reviewed-by: Shu-yu Guo <syg@chromium.org> Commit-Queue: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#83242}
17 lines
482 B
JavaScript
17 lines
482 B
JavaScript
// Copyright 2022 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --harmony-rab-gsab
|
|
|
|
const rab1 = new ArrayBuffer(2000, {'maxByteLength': 4000});
|
|
class MyInt8Array extends Int8Array {
|
|
constructor() {
|
|
super(rab1);
|
|
}
|
|
};
|
|
const rab2 = new ArrayBuffer(1000, {'maxByteLength': 4000});
|
|
const ta = new Int8Array(rab2);
|
|
ta.constructor = MyInt8Array;
|
|
ta.slice();
|