v8/test/mjsunit/asm
bradnelson 3f2db58c89 [wasm] [asm.js] Don't allow bad return types from a global constant
We recently allowed global constants in asm.js validated code.
When used in a return statement, these need to be of an allowed type.

BUG=660813
R=jpp@chromium.org,aseemgarg@chromium.org

Review-Url: https://codereview.chromium.org/2481103002
Cr-Commit-Position: refs/heads/master@{#40850}
2016-11-08 23:32:04 +00:00
..
embenchen
poppler
sqlite3
asm-validation.js [wasm] [asm.js] Don't allow bad return types from a global constant 2016-11-08 23:32:04 +00:00
atomics-add.js
atomics-and.js
atomics-compareexchange.js
atomics-exchange.js
atomics-load.js
atomics-or.js
atomics-store.js
atomics-sub.js
atomics-xor.js
b5528-comma.js [V8][asm.js] Fixes a bug in comma-expression validation. 2016-10-18 19:05:42 +00:00
do-while-false.js
do-while.js
float32array-negative-offset.js
float32array-outofbounds.js
float32array-store-div.js
float64array-negative-offset.js
float64array-outofbounds.js
float64array-store-div.js
float64mul.js
if-cloning.js
if-folding.js
if-reduction.js
if-tonumber.js
infinite-loops-taken.js
infinite-loops.js
int8array-negative-offset.js
int16array-negative-offset.js
int16array-outofbounds.js
int32-div.js
int32-mod.js
int32-mul.js
int32-tmod.js
int32-udiv.js
int32-umod.js
int32array-constant-key.js
int32array-negative-offset.js
int32array-outofbounds.js
int32array-unaligned.js
int32div.js
int32mod-constant.js
int32mod.js
int32modb.js
load-elimination.js [turbofan] Disable LoadElimination completely for asm.js. 2016-08-25 06:14:59 +00:00
math-abs.js
math-ceil.js
math-clz32.js
math-floor.js
math-fround.js
pointer-masking.js
redundancy1.js
redundancy2.js
regress-660813.js [wasm] [asm.js] Don't allow bad return types from a global constant 2016-11-08 23:32:04 +00:00
sign-extend.js
switch.js
uint8array-outofbounds.js
uint32-less-than-shift.js
uint32div.js
uint32mod-constant.js
uint32mod.js
word32and.js
word32ror.js
zero-extend.js