nodejs/deps/v8/test/mjsunit/regress/regress-crbug-1055138-1.js
Michaël Zasso 12478684aa
deps: update V8 to 8.4.371.19
PR-URL: https://github.com/nodejs/node/pull/33579
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Shelley Vohr <codebytere@gmail.com>
2020-07-13 14:41:41 +02:00

65 lines
1.7 KiB
JavaScript

// Copyright 2020 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
Object.prototype[1] = 153;
Object.freeze(Object.prototype);
(function TestSloppyStoreToReadOnlyProperty() {
function foo() {
let ar = [];
for (let i = 0; i < 3; i++) {
ar[i] = 42;
if (i == 1) {
// Attempt to overwrite read-only element should not change
// array length.
assertEquals(1, ar.length);
} else {
assertEquals(i + 1, ar.length);
}
}
return ar;
}
assertEquals([42,153,42], foo());
assertEquals([42,153,42], foo());
assertEquals([42,153,42], foo());
%PrepareFunctionForOptimization(foo);
assertEquals([42,153,42], foo());
%OptimizeFunctionOnNextCall(foo);
assertEquals([42,153,42], foo());
})();
(function StrictStoreToReadOnlyProperty() {
function foo() {
"use strict";
let ar = [];
let threw_exception = false;
for (let i = 0; i < 3; i++) {
try {
ar[i] = 42;
} catch(e) {
// Attempt to overwrite read-only element should throw and
// should not change array length.
assertTrue(i == 1);
assertEquals(1, ar.length);
assertInstanceof(e, TypeError);
threw_exception = true;
}
}
assertTrue(threw_exception);
return ar;
}
assertEquals([42,153,42], foo());
assertEquals([42,153,42], foo());
assertEquals([42,153,42], foo());
%PrepareFunctionForOptimization(foo);
assertEquals([42,153,42], foo());
%OptimizeFunctionOnNextCall(foo);
assertEquals([42,153,42], foo());
})();