918fe04351
PR-URL: https://github.com/nodejs/node/pull/58070 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Darshan Sen <raisinten@gmail.com> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
16 lines
397 B
JavaScript
16 lines
397 B
JavaScript
// Copyright 2025 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --js-staging
|
|
|
|
const ab = new ArrayBuffer(4, { "maxByteLength": 8 });
|
|
const f16 = new Float16Array(ab);
|
|
const evil = {
|
|
valueOf() {
|
|
ab.resize(0);
|
|
return 1;
|
|
}
|
|
};
|
|
assertEquals(-1, f16.lastIndexOf(0, evil));
|