| Index: test/mjsunit/json-parser-recursive.js
|
| diff --git a/test/mjsunit/regress/regress-crbug-119926.js b/test/mjsunit/json-parser-recursive.js
|
| similarity index 92%
|
| copy from test/mjsunit/regress/regress-crbug-119926.js
|
| copy to test/mjsunit/json-parser-recursive.js
|
| index 1ad250a2b83f46552584beef0c3d12521f0c921d..1e00c83c87f33b105acd076fbbc4c9316bafbef2 100644
|
| --- a/test/mjsunit/regress/regress-crbug-119926.js
|
| +++ b/test/mjsunit/json-parser-recursive.js
|
| @@ -25,11 +25,9 @@
|
| // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
| // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
| -// Flags: --gc-global
|
| -
|
| -// Test that array elements don't break upon garbage collection.
|
| -
|
| -var a = new Array(500);
|
| +var str = "[1]";
|
| for (var i = 0; i < 100000; i++) {
|
| - a[i] = new Object();
|
| + str = "[1," + str + "]";
|
| }
|
| +
|
| +assertThrows(function() { JSON.parse(str); }, RangeError);
|
|
|