0394b71379
BUG=chromium:789764 Change-Id: I6a466660159721683c4979af32019d740094151b Reviewed-on: https://chromium-review.googlesource.com/803217 Reviewed-by: Ross McIlroy <rmcilroy@chromium.org> Reviewed-by: Jochen Eisinger <jochen@chromium.org> Commit-Queue: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/master@{#49795}
16 lines
448 B
JavaScript
16 lines
448 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Original repro (used to crash):
|
|
_v3 = ({ _v7 = (function outer() {
|
|
for ([...[]][function inner() {}] in []) {
|
|
}
|
|
})} = {}) => {
|
|
};
|
|
_v3();
|
|
|
|
// Smaller repro (used to crash):
|
|
a = (b = !function outer() { for (function inner() {}.foo in []) {} }) => {};
|
|
a();
|