v8/test/mjsunit/regress/regress-6431.js
Michael Starzinger 21cbc91443 [asm.js] Ensure coercion of imports is non-observable.
This makes sure that the coercion of global import values to numbers
remains non-observable to JavaScript. It allows instantiation failures
to fall back to JavaScript proper without accidentally causing some
side-effect to happen twice. Also coercions might invalidate previous
checks done during linking or throw exceptions.

R=clemensh@chromium.org
TEST=mjsunit/regress/regress-6431
BUG=v8:6431

Change-Id: Ibe2f7a336bc0fb25532d526746ecc802e04bbd5c
Reviewed-on: https://chromium-review.googlesource.com/512544
Commit-Queue: Michael Starzinger <mstarzinger@chromium.org>
Reviewed-by: Clemens Hammacher <clemensh@chromium.org>
Cr-Commit-Position: refs/heads/master@{#46051}
2017-06-20 13:55:35 +00:00

33 lines
917 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
(function TestImportSymbolValue() {
function Module(stdlib, foreign) {
"use asm";
var x = +foreign.x;
function f() {}
return { f:f };
}
var foreign = { x : Symbol("boom") };
assertThrows(() => Module(this, foreign));
assertFalse(%IsAsmWasmCode(Module));
})();
(function TestImportMutatingObject() {
function Module(stdlib, foreign) {
"use asm";
var x = +foreign.x;
var PI = stdlib.Math.PI;
function f() { return +(PI + x) }
return { f:f };
}
var stdlib = { Math : { PI : Math.PI } };
var foreign = { x : { valueOf : () => (stdlib.Math.PI = 23, 42) } };
var m = Module(stdlib, foreign);
assertFalse(%IsAsmWasmCode(Module));
assertEquals(65, m.f());
})();