v8/test/mjsunit/regress/wasm/regress-968078.js
Sigurd Schneider 19eb7234ba [arm64] Ensure pools are emitted before emitting large branch tables
Change-Id: Iedb78a62886177f5c603b2f3ce9b586ac1320d31
Bug: chromium:968078
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1664067
Reviewed-by: Andreas Haas <ahaas@chromium.org>
Commit-Queue: Sigurd Schneider <sigurds@chromium.org>
Cr-Commit-Position: refs/heads/master@{#62244}
2019-06-18 13:42:22 +00:00

48 lines
1.4 KiB
JavaScript

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --expose-wasm
load("test/mjsunit/wasm/wasm-module-builder.js");
(function() {
function repeat(value, length) {
var arr = new Array(length);
for (let i = 0; i < length; i++) {
arr[i] = value;
}
return arr;
}
function br_table(block_index, length, def_block) {
const bytes = new Binary();
bytes.emit_bytes([kExprBrTable]);
// Functions count (different than the count in the functions section.
bytes.emit_u32v(length);
bytes.emit_bytes(repeat(block_index, length));
bytes.emit_bytes([def_block]);
return Array.from(bytes.trunc_buffer());
}
var builder = new WasmModuleBuilder();
builder.addMemory(12, 12, false);
builder.addFunction("foo", kSig_v_iii)
.addBody([].concat([
kExprBlock, kWasmStmt,
kExprGetLocal, 0x2,
kExprI32Const, 0x01,
kExprI32And,
// Generate a test branch (which has 32k limited reach).
kExprIf, kWasmStmt,
kExprGetLocal, 0x0,
kExprI32Const, 0x01,
kExprI32And,
kExprBrIf, 0x1,
kExprGetLocal, 0x0,
// Emit a br_table that is long enough to make the test branch go out of range.
], br_table(0x1, 9000, 0x00), [
kExprEnd,
kExprEnd,
])).exportFunc();
builder.instantiate();
})();