nodejs/deps/v8/test/mjsunit/regress/wasm/regress-crbug-1339321.js
Michaël Zasso cfbf9e0d14 deps: update V8 to 12.4.254.14
PR-URL: https://github.com/nodejs/node/pull/52465
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
2024-04-22 21:25:15 +00:00

65 lines
1.6 KiB
JavaScript

// Copyright 2022 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
d8.file.execute("test/mjsunit/wasm/wasm-module-builder.js");
let builder = new WasmModuleBuilder();
builder.addFunction("leak", kSig_l_v)
.exportFunc()
.addLocals(kWasmI64, 10)
.addBody([
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprBlock, kWasmVoid,
kExprLoop, kWasmVoid,
kExprRefNull, kAnyRefCode,
kExprBrOnNonNull, 0,
kExprBr, 1,
kExprEnd, // loop
kExprEnd, // block
kExprDrop,
kExprDrop,
kExprDrop,
kExprDrop,
]);
let loop_type = builder.addType(makeSig([kWasmAnyRef], []));
builder.addFunction("crash", kSig_v_v).exportFunc().addBody([
kExprRefNull, kAnyRefCode,
kExprLoop, loop_type,
kExprRefNull, kAnyRefCode,
kGCPrefix, kExprBrOnCast, 0b01, 0, kAnyRefCode, kI31RefCode,
kExprDrop,
kExprDrop,
kExprEnd, // loop
]);
let array_type = builder.addArray(wasmRefNullType(kSig_i_i), true);
builder.addFunction("array", kSig_l_v).exportFunc()
.addLocals(kWasmI64, 10)
.addBody([
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprLocalGet, 0,
kExprI32Const, 0,
kGCPrefix, kExprArrayNewDefault, array_type,
kExprDrop,
kExprDrop,
kExprDrop,
kExprDrop,
kExprDrop,
])
let instance = builder.instantiate();
let result = instance.exports.leak();
assertEquals(0n, result);
result = instance.exports.array();
assertEquals(0n, result);
instance.exports.crash();