f51e0368ea
This CL adds regression tests for two bugs where the wrong native context is used when lazy accessors are instantiated. The first bug injects an object created in context 1, into another context 2. The object has an accessor pair installed via FunctionTemplate. In context 2, the property descriptor of this accessor is retrieved, causing the JSFunction to be instantiated with the current context (context 2) instead of the creation context of the object (context 1). The second bug is similar. When breakpoints are set, the whole heap is walked and all lazy accessor pairs are instantiated. This again uses the current context instead of using the context from which a AccessorPair originates. Bug: chromium:986063, chromium:989909 Change-Id: Iaaea6e81f1b9f6b55fc7583b260aa9aea035a8d3 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1730999 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/master@{#63048}
50 lines
1.9 KiB
Plaintext
50 lines
1.9 KiB
Plaintext
# Copyright 2014 the V8 project authors. All rights reserved.
|
|
# Use of this source code is governed by a BSD-style license that can be
|
|
# found in the LICENSE file.
|
|
|
|
[
|
|
[ALWAYS, {
|
|
# https://crbug.com/986063.
|
|
# TODO(szuend): Re-enable test once the fix has landed.
|
|
'AccessRegressionTest.InstantiatedLazyAccessorPairsHaveCorrectNativeContext': [FAIL],
|
|
'AccessRegressionTest.InstantiatedLazyAccessorPairsHaveCorrectNativeContextDebug': [FAIL],
|
|
}], # ALWAYS
|
|
|
|
['system == macos and asan', {
|
|
# BUG(820416).
|
|
'BitsDeathTest*': [SKIP],
|
|
'LiveRangeUnitTest*': [SKIP],
|
|
'LoggingDeathTest*': [SKIP],
|
|
'LoggingTest.CompareClassTypes': [SKIP],
|
|
'LoggingTest.CompareWithDifferentSignedness': [SKIP],
|
|
'LoggingTest.CompareWithReferenceType': [SKIP],
|
|
'RandomNumberGenerator.NextSampleInvalidParam': [SKIP],
|
|
'RandomNumberGenerator.NextSampleSlowInvalidParam1': [SKIP],
|
|
'RandomNumberGenerator.NextSampleSlowInvalidParam2': [SKIP],
|
|
}], # 'system == macos and asan'
|
|
|
|
['(arch == arm or arch == mips) and not simulator_run', {
|
|
# Uses too much memory.
|
|
'Parameterized/WasmCodeManagerTest.GrowingVsFixedModule/Fixed': [SKIP]
|
|
}], # '(arch == arm or arch == mips) and not simulator_run'
|
|
|
|
##############################################################################
|
|
['lite_mode or variant == jitless', {
|
|
# TODO(v8:7777): Re-enable once wasm is supported in jitless mode.
|
|
'ValueSerializerTestWithSharedArrayBufferClone.RoundTripWebAssemblyMemory': [SKIP],
|
|
'ValueSerializerTestWithWasm.*': [SKIP],
|
|
'Parameterized/WasmCodeManagerTest.*': [SKIP],
|
|
}], # lite_mode or variant == jitless
|
|
|
|
##############################################################################
|
|
['variant == jitless and not embedded_builtins', {
|
|
'*': [SKIP],
|
|
}], # variant == jitless and not embedded_builtins
|
|
|
|
['system == windows and asan', {
|
|
# BUG(893437).
|
|
'Torque*': [SKIP],
|
|
}], # 'system == windows and asan'
|
|
|
|
]
|