59807ec552
Add check, that passed argument is a HeapObject. Bug: chromium:1196503 Change-Id: I23d951b5581781ad3c6867d81c765d13c329d3a8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2808936 Commit-Queue: Camillo Bruni <cbruni@chromium.org> Auto-Submit: Patrick Thier <pthier@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/master@{#73820}
38 lines
1.1 KiB
JavaScript
38 lines
1.1 KiB
JavaScript
// Copyright 2021 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --always-sparkplug --allow-natives-syntax
|
|
|
|
// This test mainly exists to make ClusterFuzz aware of
|
|
// d8.test.verifySourcePositions.
|
|
|
|
globalValue = false;
|
|
|
|
function foo(param1, ...param2) {
|
|
try {
|
|
for (let key in param1) { param2.push(key); }
|
|
for (let a of param1) { param2.push(a); }
|
|
let [a, b] = param2;
|
|
let copy = [{literal:1}, {}, [], [1], 1, ...param2];
|
|
return a + b + copy.length;
|
|
} catch (e) {
|
|
return e.toString().match(/[a-zA-Z]+/g);
|
|
} finally {
|
|
globalValue = new String(23);
|
|
}
|
|
return Math.min(Math.random(), 0.5);
|
|
}
|
|
|
|
var obj = [...Array(10).keys()];
|
|
obj.foo = 'bar';
|
|
foo(obj, obj);
|
|
|
|
d8.test.verifySourcePositions(foo);
|
|
|
|
// Make sure invalid calls throw.
|
|
assertThrows(() => {d8.test.verifySourcePositions(0)});
|
|
assertThrows(() => {d8.test.verifySourcePositions(obj)});
|
|
assertThrows(() => {d8.test.verifySourcePositions(new Proxy(foo, {}))});
|
|
assertThrows(() => {d8.test.verifySourcePositions(%GetUndetectable())});
|