| Index: test/mjsunit/regress/wasm/regression-717194.js
|
| diff --git a/test/mjsunit/regress/wasm/regression-717194.js b/test/mjsunit/regress/wasm/regression-717194.js
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..074b2e4bca99d2d5dfc9cec1948f34339ded0575
|
| --- /dev/null
|
| +++ b/test/mjsunit/regress/wasm/regression-717194.js
|
| @@ -0,0 +1,30 @@
|
| +// Copyright 2017 the V8 project authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +PAGE_SIZE = 0x10000;
|
| +PAGES = 10;
|
| +
|
| +memory = new WebAssembly.Memory({initial: PAGES});
|
| +buffer = memory.buffer;
|
| +
|
| +var func = (function (stdlib, env, heap) {
|
| + "use asm";
|
| +
|
| + var array = new stdlib.Int32Array(heap);
|
| +
|
| + return function () {
|
| + array[0] = 0x41424344;
|
| + array[1] = 0x45464748;
|
| + }
|
| +}({Int32Array: Int32Array}, {}, buffer));
|
| +
|
| +for (var i = 0; i < 1000; ++i)
|
| + func();
|
| +
|
| +memory.grow(1);
|
| +
|
| +func();
|
| +
|
| +for(var i = 0; i < 2; ++i)
|
| + new ArrayBuffer(PAGE_SIZE * PAGES);
|
|
|