94139bc6ac
Bug: chromium:834693, chromium:834955 Change-Id: I243521f45c2b7e2457a37d34ab3629670d8fa39b Reviewed-on: https://chromium-review.googlesource.com/1020361 Commit-Queue: Eric Holk <eholk@chromium.org> Reviewed-by: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#52744}
21 lines
646 B
JavaScript
21 lines
646 B
JavaScript
// Copyright 2018 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// flags: --wasm-lazy-compilation
|
|
|
|
load("test/mjsunit/wasm/wasm-constants.js");
|
|
load("test/mjsunit/wasm/wasm-module-builder.js");
|
|
|
|
var module = new WasmModuleBuilder();
|
|
module.addMemory();
|
|
module.addFunction("main", kSig_v_v)
|
|
.addBody([
|
|
kExprI32Const, 20,
|
|
kExprI32Const, 29,
|
|
kExprGrowMemory, kMemoryZero,
|
|
kExprI32StoreMem, 0, 0xFF, 0xFF, 0x7A])
|
|
.exportAs("main");
|
|
var instance = module.instantiate();
|
|
assertTraps(kTrapMemOutOfBounds, instance.exports.main);
|