Experimental parser: merge to r19637

test/mjsunit/regress/regress-336820.js

Index: test/mjsunit/regress/regress-336820.js
diff --git a/test/cctest/test-platform-macos.cc b/test/mjsunit/regress/regress-336820.js
similarity index 86%
copy from test/cctest/test-platform-macos.cc
copy to test/mjsunit/regress/regress-336820.js
index 5bc5f97849a026cd7e843012fec410c5b34df87a..9b466296043b858df75b7f1fe9f959b66abea969 100644
--- a/test/cctest/test-platform-macos.cc
+++ b/test/mjsunit/regress/regress-336820.js
@@ -1,4 +1,4 @@
-// Copyright 2006-2008 the V8 project authors. All rights reserved.
+// Copyright 2014 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
@@ -24,12 +24,13 @@
 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-//
-// Tests of the TokenLock class from lock.h
-
-#include <stdlib.h>
-
-#include "v8.h"
-#include "cctest.h"
 
-using namespace ::v8::internal;
+assertThrows((function() {
+  s = "Hello World!\n";
+  while (true) {
+    x = new Array();
+    x[0] = s;
+    x[1000] = s;
+    x[1000000] = s;
+    s = x.join("::");
+  }}), RangeError);