fa911fc68e
It was shipped in Chrome 66. Bug: v8:4958, v8:8255, v8:8238 Cq-Include-Trybots: luci.v8.try:v8_linux_noi18n_rel_ng Change-Id: I52fb826f4f245bc6484d8f406ecf99bc17d268ee Reviewed-on: https://chromium-review.googlesource.com/c/1254123 Reviewed-by: Sathya Gunasekaran <gsathya@chromium.org> Reviewed-by: Aleksey Kozyatinskiy <kozyatinskiy@chromium.org> Commit-Queue: Mathias Bynens <mathias@chromium.org> Cr-Commit-Position: refs/heads/master@{#56350}
24 lines
651 B
JavaScript
24 lines
651 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
//
|
|
// There was a bug in CreateDynamicFunction where a stack overflow
|
|
// situation caused an assertion failure.
|
|
|
|
function test(api) {
|
|
function f() {
|
|
try {
|
|
// induce a stack overflow
|
|
f();
|
|
} catch(e) {
|
|
// this might result in even more stack overflows
|
|
api();
|
|
}
|
|
}
|
|
f();
|
|
}
|
|
|
|
test(( function (){}).constructor); // Function
|
|
test(( function*(){}).constructor); // GeneratorFunction
|
|
test((async function (){}).constructor); // AsyncFunction
|