summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/sharedbuf/size-with-uninitialized.js
blob: 14f6e038ce31b72ed5d5e5f6f5818dc409736e89 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
// OOM during SharedArrayBuffer initialization can expose partially initialized
// object to metadata builder.
// It shouldn't crash.

newGlobal({ newCompartment: true }).Debugger(this).memory.trackingAllocationSites = true;
for (let i = 0; i < 9; i++) {
  oomTest(function () {
    class C extends WebAssembly.Memory {}
    new C({
      initial: 0,
      maximum: 1,
      shared: 1,
    });
  });
}