Chromium Code Reviews| Index: test/mjsunit/wasm/large-offset.js |
| diff --git a/test/mjsunit/wasm/large-offset.js b/test/mjsunit/wasm/large-offset.js |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..5e88a4ed9097c318ebacb04931835e49bbe1db0d |
| --- /dev/null |
| +++ b/test/mjsunit/wasm/large-offset.js |
| @@ -0,0 +1,24 @@ |
| +// Copyright 2017 the V8 project authors. All rights reserved. |
| +// Use of this source code is governed by a BSD-style license that can be |
| +// found in the LICENSE file. |
| + |
| +load("test/mjsunit/wasm/wasm-constants.js"); |
| +load("test/mjsunit/wasm/wasm-module-builder.js"); |
| + |
| +function testGrowMemoryOutOfBoundsOffset() { |
| + print("testGrowMemoryOutOfBoundsOffset2"); |
| + var builder = new WasmModuleBuilder(); |
| + builder.addMemory(16, 128, false); |
| + builder.addFunction("main", kSig_v_v) |
| + .addBody([ |
| + kExprI32Const, 20, |
| + kExprI32Const, 29, |
| + kExprGrowMemory, kMemoryZero, |
| + kExprI32StoreMem, 0, 0xFF, 0xFF, 0xFF, 0x7a |
|
Eric Holk
2017/06/13 16:19:48
Ah, here's the way out of bounds test! Thanks.
Co
gdeepti
2017/06/13 21:25:43
Done.
|
| + ]) |
| + .exportAs("main"); |
| + var module = builder.instantiate(); |
| + assertTraps(kTrapMemOutOfBounds, module.exports.main); |
| +} |
| + |
| +testGrowMemoryOutOfBoundsOffset(); |