v8/test/mjsunit/wasm/wasm-invalid-local.js
Matthias Liedtke e002faf111 [wasm-gc] Function body decoder: Fix dcheck in case of local with invalid heap type
Bug: v8:7748
Change-Id: I9d3e2245db4d98d370291ea86d615b355f2c941a
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3921518
Reviewed-by: Jakob Kummerow <jkummerow@chromium.org>
Commit-Queue: Jakob Kummerow <jkummerow@chromium.org>
Commit-Queue: Matthias Liedtke <mliedtke@chromium.org>
Auto-Submit: Matthias Liedtke <mliedtke@chromium.org>
Cr-Commit-Position: refs/heads/main@{#83457}
2022-09-27 15:07:34 +00:00

20 lines
663 B
JavaScript

// Copyright 2022 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --experimental-wasm-gc
d8.file.execute('test/mjsunit/wasm/wasm-module-builder.js');
(function TestLocalInvalidHeapType() {
let builder = new WasmModuleBuilder();
builder.addFunction('testEqLocal',
makeSig([], [kWasmAnyRef]))
.addLocals(wasmRefNullType(123), 1) // 123 is not a valid type index
.addBody([
kExprRefNull, kNullRefCode,
kExprLocalSet, 0,
]).exportFunc();
assertThrows(() => builder.instantiate(), WebAssembly.CompileError);
})();