Index: test/mjsunit/harmony/regress/regress-crbug-621111.js |
diff --git a/test/mjsunit/harmony/regress/regress-crbug-621111.js b/test/mjsunit/harmony/regress/regress-crbug-621111.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..58a0d5ce3fc30a11c3b5521ff7ab9a6a8b6fe620 |
--- /dev/null |
+++ b/test/mjsunit/harmony/regress/regress-crbug-621111.js |
@@ -0,0 +1,6 @@ |
+// Copyright 2016 the V8 project authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+(y = 1[1, [...[]]]) => 1; // will core dump, if not fixed |
+(y = 1[1, [...[]]]) => {}; // will core dump, if not fixed |