nodejs/deps/v8/test/mjsunit/regress/regress-688690.js
Michaël Zasso 60d1aac8d2 deps: update V8 to 5.8.283.38
PR-URL: https://github.com/nodejs/node/pull/12784
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com>
2017-05-06 20:02:35 +02:00

17 lines
488 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
var foo = "01234567";
foo += foo;
foo += foo;
foo += foo;
foo += foo;
foo += foo; // foo.length = 256;
// Create an adaptor frame, and take the StringReplaceOneCharWithString runtime
// fast path. This crashed originally since TailCallRuntime could not handle
// adaptor frames.
var bar = foo.replace('x', 'y', 'z');