nodejs/deps/v8/test/mjsunit/regress/regress-786573.js
Michaël Zasso 4c4af643e5
deps: update V8 to 6.4.388.40
PR-URL: https://github.com/nodejs/node/pull/17489
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
2018-01-24 15:02:20 -08:00

17 lines
556 B
JavaScript

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
let cnt = 0;
let reg = /./g;
reg.exec = () => {
// Note: it's still possible to trigger OOM by passing huge values here, since
// the spec requires building a list of all captures in
// https://tc39.github.io/ecma262/#sec-regexp.prototype-@@replace
if (cnt++ == 0) return {length: 2 ** 16};
cnt = 0;
return null;
};
assertThrows(() => ''.replace(reg, () => {}), RangeError);