1// Copyright 2010 the V8 project authors. All rights reserved. 2// Redistribution and use in source and binary forms, with or without 3// modification, are permitted provided that the following conditions are 4// met: 5// 6// * Redistributions of source code must retain the above copyright 7// notice, this list of conditions and the following disclaimer. 8// * Redistributions in binary form must reproduce the above 9// copyright notice, this list of conditions and the following 10// disclaimer in the documentation and/or other materials provided 11// with the distribution. 12// * Neither the name of Google Inc. nor the names of its 13// contributors may be used to endorse or promote products derived 14// from this software without specific prior written permission. 15// 16// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 17// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 18// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 19// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 20// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 21// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 22// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 23// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 24// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 25// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 26// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 27 28// Flags: --max-semi-space-size=1 29"use strict"; 30 31// Check for GC bug constructing exceptions. 32var v = [1, 2, 3, 4] 33 34Object.preventExtensions(v); 35 36function foo() { 37 var re = /2147483647/; // Equal to 0x7fffffff. 38 for (var i = 0; i < 10000; i++) { 39 var ok = false; 40 try { 41 var j = 1; 42 // Allocate some heap numbers in order to randomize the behaviour of the 43 // garbage collector. 93 is chosen to be a prime number to avoid the 44 // allocation settling into a too neat pattern. 45 for (var j = 0; j < i % 93; j++) { 46 j *= 1.123567; // An arbitrary floating point number. 47 } 48 v[0x7fffffff] = 0; // Trigger exception. 49 assertTrue(false); 50 return j; // Make sure that future optimizations don't eliminate j. 51 } catch(e) { 52 ok = true; 53 assertTrue(re.test(e), 'e: ' + e); 54 } 55 assertTrue(ok); 56 } 57} 58 59foo(); 60