v8/test/debugger/regress
Benedikt Meurer 40dd065823 [debugger] Properly deal with settled promises in catch prediction.
The catch prediction logic got confused when we merged the reactions and
result fields of JSPromise, because for settled promises it would start
to treat the result as reactions list, leading to a crash most likely or
memory corruption in the worst case (only if break on uncaught exception
is enabled). We can only inspect reactions when the promise is still in
"pending" state.

Bug: chromium:808973, v8:7253
Change-Id: I15162c96fce959a052fbc628addd9418da39327c
Reviewed-on: https://chromium-review.googlesource.com/903163
Reviewed-by: Jakob Gruber <jgruber@chromium.org>
Commit-Queue: Benedikt Meurer <bmeurer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#51106}
2018-02-06 08:42:35 +00:00
..
regress-1639-2.js [debug-wrapper] remove last uses of --expose-debug-as 2016-12-19 10:44:34 +00:00
regress-2318.js [inspector] gracefully handle stack overflows in the inspector. 2016-12-19 14:07:55 +00:00
regress-5575-1.js [debugger,compiler] do not recompile already compiled inner functions. 2016-11-11 15:53:33 +00:00
regress-5575-2.js [debugger,compiler] do not recompile already compiled inner functions. 2016-11-11 15:53:33 +00:00
regress-5575-3.js [debugger,compiler] do not recompile already compiled inner functions. 2016-11-11 15:53:33 +00:00
regress-5610.js [turbofan] Remove --turbo shorthand for --turbo-filter. 2017-06-23 11:19:19 +00:00
regress-5901-1.js [fullcodegen] Remove --stress-fullcodegen flag. 2017-08-10 09:52:49 +00:00
regress-5901-2.js [inspector] improve return position of explicit return in non-async function 2017-07-14 19:10:13 +00:00
regress-5950.js [debug] Handle OOM events in debugger tests 2017-02-16 11:48:22 +00:00
regress-6085.js [debugger] fix switch block source positions. 2017-03-13 12:47:48 +00:00
regress-6526.js Add exception prediction for ArrayForEachLoopLazyDeoptContinuation 2017-06-28 10:37:13 +00:00
regress-crbug-724858.js [inspector] improve return position of explicit return in non-async function 2017-07-14 19:10:13 +00:00
regress-crbug-736758.js Fix debugger's frame inspection for optimized Array.forEach. 2017-06-27 10:56:42 +00:00
regress-crbug-808973.js [debugger] Properly deal with settled promises in catch prediction. 2018-02-06 08:42:35 +00:00