diff options
Diffstat (limited to 'deps/v8/test/mjsunit/maglev/typedarray-out-of-bounds.js')
-rw-r--r-- | deps/v8/test/mjsunit/maglev/typedarray-out-of-bounds.js | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/maglev/typedarray-out-of-bounds.js b/deps/v8/test/mjsunit/maglev/typedarray-out-of-bounds.js new file mode 100644 index 0000000000..28c8e1c5df --- /dev/null +++ b/deps/v8/test/mjsunit/maglev/typedarray-out-of-bounds.js @@ -0,0 +1,23 @@ +// Copyright 2023 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. +// +// Flags: --allow-natives-syntax --maglev + +function foo(index) { + const array = new Uint8Array(8); + array[index] = 42; + return array; +} + +%PrepareFunctionForOptimization(foo); + +foo(0); +foo(0); + +%OptimizeMaglevOnNextCall(foo); + +foo(0); + +// This call is one element past the end and should deoptimize. +foo(8); |