nodejs/deps/v8/test/mjsunit/regress/regress-1006640.js
Michaël Zasso 6ca81ad72a
deps: update V8 to 7.9.317.20
PR-URL: https://github.com/nodejs/node/pull/30020
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
2019-11-08 15:46:25 +01:00

21 lines
589 B
JavaScript

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --expose-gc
function main() {
const v2 = [1337,1337,1337,1337,1337];
function v9() {
const v15 = {get:RegExp};
Object.defineProperty(v2,501,v15);
const v18 = RegExp();
const v19 = 1337 instanceof v18;
}
const v30 = {defineProperty:Function,get:v9,getPrototypeOf:Object};
const v32 = new Proxy(ArrayBuffer,v30);
const v34 = gc(v32);
}
assertThrows(() => main(), TypeError);