diff options
author | Michaƫl Zasso <targos@protonmail.com> | 2018-01-24 20:16:06 +0100 |
---|---|---|
committer | Myles Borins <mylesborins@google.com> | 2018-01-24 15:02:20 -0800 |
commit | 4c4af643e5042d615a60c6bbc05aee9d81b903e5 (patch) | |
tree | 3fb0a97988fe4439ae3ae06f26915d1dcf8cab92 /deps/v8/test/mjsunit/regress/regress-786573.js | |
parent | fa9f31a4fda5a3782c652e56e394465805ebb50f (diff) | |
download | node-new-4c4af643e5042d615a60c6bbc05aee9d81b903e5.tar.gz |
deps: update V8 to 6.4.388.40
PR-URL: https://github.com/nodejs/node/pull/17489
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-786573.js')
-rw-r--r-- | deps/v8/test/mjsunit/regress/regress-786573.js | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-786573.js b/deps/v8/test/mjsunit/regress/regress-786573.js new file mode 100644 index 0000000000..a7d5f37e75 --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-786573.js @@ -0,0 +1,16 @@ +// Copyright 2017 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +let cnt = 0; +let reg = /./g; +reg.exec = () => { + // Note: it's still possible to trigger OOM by passing huge values here, since + // the spec requires building a list of all captures in + // https://tc39.github.io/ecma262/#sec-regexp.prototype-@@replace + if (cnt++ == 0) return {length: 2 ** 16}; + cnt = 0; + return null; +}; + +assertThrows(() => ''.replace(reg, () => {}), RangeError); |