nodejs/deps/v8/test/mjsunit/regress/wasm/regress-1458941.js
Michaël Zasso 09a8440b45
deps: update V8 to 12.2.281.27
PR-URL: https://github.com/nodejs/node/pull/51362
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
2024-03-31 15:36:07 +02:00

34 lines
1.0 KiB
JavaScript

// Copyright 2023 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --no-liftoff
// Regression test for https://crbug.com/1458941.
d8.file.execute('test/mjsunit/wasm/wasm-module-builder.js');
(function foo() {
let builder = new WasmModuleBuilder();
let array = builder.addArray(kWasmI32);
builder.addFunction(`brOnCastFail`,
makeSig([], [kWasmI32]))
.addBody([
kExprBlock, kWasmRef, array,
kGCPrefix, kExprArrayNewFixed, array, 0,
...wasmBrOnCastFail(0, wasmRefType(array), wasmRefType(array)),
kGCPrefix, kExprArrayLen,
kExprDrop,
kExprI32Const, 0,
kExprReturn,
kExprEnd,
kExprDrop,
kExprI32Const, 1,
]).exportFunc();
let instance = builder.instantiate();
let wasm = instance.exports;
assertEquals(0, wasm.brOnCastFail());
})();