v8/test/mjsunit/regress/regress-441099.js
svenpanne cbf3b0bcc7 More -fsanitize=vptr fixes.
This actually fixes 3 different issues when accessing Operand1:

   * Object vs. HeapObject

   * Wrong defaults for equals/hash

   * silently dropping const

TEST=test/mjsunit/regress/regress-441099.js
BUG=chromium:441099
LOG=y

Review URL: https://codereview.chromium.org/812563002

Cr-Commit-Position: refs/heads/master@{#25843}
2014-12-16 14:20:28 +00:00

54 lines
1.4 KiB
JavaScript

// Copyright 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
var Module;
if (!Module) Module = eval('(function() { try { return Module || {} } catch(e) { return {} } })()');
else if (ENVIRONMENT_IS_SHELL) {
}
var Runtime = {
stackSave: function () {
},
alignMemory: function (quantum) { var ret = size = Math.ceil()*(quantum ? quantum : 8); return ret; }}
function allocate() {
}
function callRuntimeCallbacks(callbacks) {
var callback = callbacks.shift();
var func = callback.func;
if (typeof func === 'number') {
} else {
func();
}
}
var __ATINIT__ = []; // functions called during startup
function ensureInitRuntime() {
callRuntimeCallbacks(__ATINIT__);
}
/* global initializers */ __ATINIT__.push({ func: function() { runPostSets() } });
function __formatString() {
switch (next) {
}
}
var Browser={mainLoop:{queue:[],pause:function () {
}},moduleContextCreatedCallbacks:[],workers:[],init:function () {
}};
var asm = (function() {
'use asm';
function setThrew() {
}
function runPostSets() {
}
function _main() {
}
function _free() {
}
return { runPostSets: runPostSets};
})
();
var runPostSets = Module["runPostSets"] = asm["runPostSets"];
var i64Math = (function() { // Emscripten wrapper
/**
*/
})();
ensureInitRuntime();