v8/test/mjsunit/compiler/regress-801097.js
Ross McIlroy 56378899e5 [TurboFan] Fix null-dereference on code-gen failure.
BUG=chromium:801097

Change-Id: Ie631822a668b55b0f0790b719e7d8cdde78d95c6
Reviewed-on: https://chromium-review.googlesource.com/861882
Commit-Queue: Ross McIlroy <rmcilroy@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#50544}
2018-01-12 14:40:08 +00:00

20 lines
513 B
JavaScript

// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function GetFunction() {
var source = "return ((dividend | 0) / ((";
for (var i = 0; i < 0x8000; i++) {
source += "a,"
}
source += "a) | 0)) | 0";
return Function("dividend", source);
}
var func = GetFunction();
assertThrows("func();");
%OptimizeFunctionOnNextCall(func);
assertThrows("func()");