v8/test/mjsunit/regress/regress-crbug-923264.js
Camillo Bruni c45a2eff0b [heap] Allow PreparseData in large object space
Since the PreparseData now directly contains the byte data inline it can
grow very large as well.

Bug: chromium:923264
Change-Id: I456d5bcbfb40587b283584f726d9e084061fd30f
Reviewed-on: https://chromium-review.googlesource.com/c/1421321
Reviewed-by: Michael Lippautz <mlippautz@chromium.org>
Commit-Queue: Camillo Bruni <cbruni@chromium.org>
Cr-Commit-Position: refs/heads/master@{#58953}
2019-01-21 11:18:02 +00:00

28 lines
555 B
JavaScript

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --verify-heap --expose-gc
let paramName = '';
for (let i=0; i < 2**10; i++) {
paramName += 'a';
}
let params = '';
for (let i = 0; i < 2**10; i++) {
params += paramName + i + ',';
}
let fn = eval(`(
class A {
constructor (${params}) {
function lazy() {
return function lazier() { return ${paramName+1} }
};
return lazy;
}
})`);
gc()