4a7abdc32a
Bug: chromium:1237153 Change-Id: If3c17d46cf53ba73cd6c199703b2854eb55fb68d Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3077145 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Santiago Aboy Solanes <solanes@chromium.org> Cr-Commit-Position: refs/heads/master@{#76133}
18 lines
710 B
JavaScript
18 lines
710 B
JavaScript
// Copyright 2021 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Try to catch TSAN issues with access to SharedArrayBuffer.
|
|
|
|
function onmessage([buf]) {
|
|
const arr = new Int32Array(buf);
|
|
for (let val = 1; val < 100; ++val) arr.fill(val);
|
|
}
|
|
const arr = new Int32Array(new SharedArrayBuffer(4));
|
|
const worker = new Worker(`onmessage = ${onmessage}`, { type: 'string' });
|
|
worker.postMessage([arr.buffer]);
|
|
// Wait until the worker starts filling the array.
|
|
while (Atomics.load(arr) == 0) { }
|
|
// Try creating a slice of the shared array buffer that races with the fill.
|
|
const slice = arr.slice(0, 1);
|