58325e616d
The whitelist is populated with those inline intrinsics that are lowered in JSIntrinsicInlining and were not previously blacklisted. Thus the only additional FrameStates this CL adds are those where the caller tries to call the INLINE version of an intrinsic but ends up calling the RUNTIME version instead. R=bmeurer@chromium.org BUG=chromium:644631 Review-Url: https://codereview.chromium.org/2331543002 Cr-Commit-Position: refs/heads/master@{#39357}
13 lines
313 B
JavaScript
13 lines
313 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --turbo --always-opt
|
|
|
|
function f() {
|
|
new Int8Array(new ArrayBuffer(2147483648));
|
|
}
|
|
|
|
// Should not crash
|
|
assertThrows(f, RangeError);
|