nodejs/deps/v8/test/mjsunit/regress/wasm/regress-339984212.js
Michaël Zasso 9d7cd9b864
deps: update V8 to 12.8.374.13
PR-URL: https://github.com/nodejs/node/pull/54077
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
2024-08-16 16:03:01 +02:00

31 lines
960 B
JavaScript

// Copyright 2024 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
d8.file.execute('test/mjsunit/wasm/wasm-module-builder.js');
let builder = new WasmModuleBuilder();
// To trigger the DCHECK, the fields' total size must be >= 256*kTaggedSize.
let $struct = builder.addStruct(new Array(128).fill(makeField(kWasmF64, true)));
builder.addFunction("makeStruct", makeSig([], [wasmRefType($struct)]))
.exportFunc()
.addBody([kGCPrefix, kExprStructNewDefault, $struct]);
let instance = builder.instantiate();
let wasm_object = instance.exports.makeStruct();
function main(obj) {
try {
for (let element of obj) {}
} catch(e) {
assertMatches(/obj is not iterable/, e.message);
}
}
%PrepareFunctionForOptimization(main);
main(wasm_object);
main(wasm_object);
%OptimizeFunctionOnNextCall(main);
main(wasm_object);