v8/test/mjsunit/regress/regress-crbug-764219.js
Igor Sheludko 5ea95febb0 [ic] Do access checks when storing via JSGlobalProxy.
Bug: chromium:764219
Change-Id: I99d1192c5c0f2b8bf47e0f193a0c4d9c00477466
Reviewed-on: https://chromium-review.googlesource.com/712454
Commit-Queue: Igor Sheludko <ishell@chromium.org>
Reviewed-by: Jakob Kummerow <jkummerow@chromium.org>
Cr-Commit-Position: refs/heads/master@{#48492}
2017-10-12 09:10:55 +00:00

25 lines
398 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
(function() {
function f(o) {
o.x = 42;
};
f({});
f(this);
f(this);
})();
(function() {
function f(o) {
o.y = 153;
};
Object.setPrototypeOf(this, new Proxy({}, {}));
f({});
f(this);
f(this);
})();