deps: update V8 to 7.7.299.4

PR-URL: https://github.com/nodejs/node/pull/28918
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>

1 files changed, 28 insertions, 0 deletions

diff --git a/deps/v8/test/mjsunit/asm/regress-9531.js b/deps/v8/test/mjsunit/asm/regress-9531.js
new file mode 100644
index 0000000000..f52e531fd3
--- /dev/null
+++ b/deps/v8/test/mjsunit/asm/regress-9531.js
@@ -0,0 +1,28 @@
+// Copyright 2019 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --validate-asm --allow-natives-syntax
+
+function Module(stdlib, ffi, buffer) {
+  "use asm";
+  var MEM8 = new stdlib.Uint8Array(buffer);
+  function foo() { return MEM8[0] | 0; }
+  return { foo: foo };
+}
+
+
+function RunOnce() {
+  let buffer = new ArrayBuffer(4096);
+  let ffi = {};
+  let stdlib = {Uint8Array: Uint8Array};
+  let module = Module(stdlib, ffi, buffer);
+  assertTrue(%IsAsmWasmCode(Module));
+  assertEquals(0, module.foo());
+}
+
+(function RunTest() {
+  for (let i = 0; i < 3000; i++) {
+    RunOnce();
+  }
+})();