v8/test/mjsunit/regress/regress-crbug-1347721.js
Marja Hölttä 602960f8ea Reland [rab/gsab] Fix accessing raw byte length
Now with smaller repro

Bug: v8:11111,chromium:1347721
Change-Id: I637d85e91249aa8eb433f6e00e4fd385d5b950ce
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3789519
Commit-Queue: Jakob Kummerow <jkummerow@chromium.org>
Auto-Submit: Marja Hölttä <marja@chromium.org>
Reviewed-by: Jakob Kummerow <jkummerow@chromium.org>
Cr-Commit-Position: refs/heads/main@{#82022}
2022-07-28 10:45:22 +00:00

14 lines
407 B
JavaScript

// Copyright 2022 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --harmony-rab-gsab
for (let i = 0; i < 1000; i++) {
const rab = new ArrayBuffer(1632, {"maxByteLength": 4096});
const ta1 = new Uint32Array(rab);
const ta2 = new Float32Array(rab);
rab.resize(2004);
ta1["set"](ta2);
}