v8/test/mjsunit/regress/regress-crbug-1028396.js
Igor Sheludko e34e5271d9 Fix too restrictive check in Map::MapVerify
Bug: chromium:1025468, chromium:1028396
Change-Id: I76f75b4137e2c166a1f89fd9f2e88330281c7625
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1936467
Reviewed-by: Toon Verwaest <verwaest@chromium.org>
Commit-Queue: Igor Sheludko <ishell@chromium.org>
Cr-Commit-Position: refs/heads/master@{#65169}
2019-11-26 11:08:15 +00:00

20 lines
515 B
JavaScript

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --expose-gc
(function () {
var GeneratorFunction = function* () {}.constructor;
class MyFunc extends GeneratorFunction {
constructor(...args) {
super(...args);
this.o = {};
this.o = {};
}
}
var f = new MyFunc("'use strict'; yield 153;");
gc();
var f = new MyFunc("'use strict'; yield 153;");
})();