04af85c6a9
An oversight in my previous change (3b64764b1d) could
cause a CHECK failure.
Bug: chromium:904707
Change-Id: Ie5f1c500bddc00741b889f78ae9ecd9af581ba5c
Reviewed-on: https://chromium-review.googlesource.com/c/1333409
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#57459}
15 lines
417 B
JavaScript
15 lines
417 B
JavaScript
// Copyright 2018 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
delete Float64Array.prototype.__proto__[Symbol.iterator];
|
|
|
|
let a = new Float64Array(9);
|
|
Object.defineProperty(a, "length", {
|
|
get: function () { %ArrayBufferNeuter(a.buffer); return 6; }
|
|
});
|
|
|
|
Float64Array.from(a);
|