v8/test/intl/regress-1130489.js
Frank Tang 2b2ebc3b24 Fix fuzzer problem due to allocation of string
Bug: chromium:1130489
Change-Id: I506f2ea418bf3bde9468126534df9d78337e5f82
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2422086
Reviewed-by: Jakob Kummerow <jkummerow@chromium.org>
Commit-Queue: Frank Tang <ftang@chromium.org>
Cr-Commit-Position: refs/heads/master@{#70073}
2020-09-22 19:53:28 +00:00

31 lines
668 B
JavaScript

// Copyright 2020 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
function runNearStackLimit(f) {
function t() {
try {
return t();
} catch (e) {
return f();
}
}
try {
return t();
} catch (e) {}
}
const str = 'hello';
const locale = new Intl.Locale('ja-u-co-eor-kf-lower-kn-false');
function test(getLocaleFromCollator) {
const localeInCollator = getLocaleFromCollator(locale);
const temp = str("en");
}
runNearStackLimit(() => {
return test(args => {
new Intl.Collator(locale).resolvedOptions().locale;
})}
);