| Index: test/mjsunit/regress/regress-672041.js
|
| diff --git a/test/mjsunit/regress/regress-672041.js b/test/mjsunit/regress/regress-672041.js
|
| deleted file mode 100644
|
| index ceea4fd59076ac960d9bc727fc1e6dabf65d4fee..0000000000000000000000000000000000000000
|
| --- a/test/mjsunit/regress/regress-672041.js
|
| +++ /dev/null
|
| @@ -1,23 +0,0 @@
|
| -// Copyright 2016 the V8 project authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -// Trigger an infinite loop through RegExp.prototype[@@match], which results
|
| -// in unbounded growth of the results array.
|
| -
|
| -// Limit the number of iterations to avoid OOM while still triggering large
|
| -// object space allocation.
|
| -const min_ptr_size = 4;
|
| -const max_regular_heap_object_size = 507136;
|
| -const num_iterations = max_regular_heap_object_size / min_ptr_size;
|
| -
|
| -const RegExpPrototypeExec = RegExp.prototype.exec;
|
| -
|
| -let i = 0;
|
| -
|
| -RegExp.prototype.__defineGetter__("global", () => true);
|
| -RegExp.prototype.exec = function(str) {
|
| - return (i++ < num_iterations) ? RegExpPrototypeExec.call(this, str) : null;
|
| -};
|
| -
|
| -"a".match();
|
|
|