6530a16eb5
Using the Hydrogen code stub bailout mechanism is not correct for the string length overflow check in the StringAddStub. Instead make sure we just throw the proper exception. R=mstarzinger@chromium.org BUG=chromium:627934 Review-Url: https://codereview.chromium.org/2146353002 Cr-Commit-Position: refs/heads/master@{#37758}
13 lines
314 B
JavaScript
13 lines
314 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
var x = "1".repeat(32 * 1024 * 1024);
|
|
for (var z = x;;) {
|
|
try {
|
|
z += {toString: function() { return x; }};
|
|
} catch (e) {
|
|
break;
|
|
}
|
|
}
|