summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/wasm/simd/ion-bug1641973.js
blob: 7dfdf3afadf48109c767d9167b75f12633fa6184 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
// |jit-test| skip-if: !wasmSimdEnabled()

// Fuzz test case.  The initial unreachable will result in the subsequent
// i8x16.shuffle popping null pointers off the value stack.  Due to a missing
// isDeadCode() check in WasmIonCompile.cpp the compiler would dereference those
// null pointers.
new WebAssembly.Module(wasmTextToBinary(`
(module
  (func (result v128)
    (unreachable)
    (i8x16.shuffle 0 0 23 0 4 4 4 4 4 16 1 0 4 4 4 4)))
`))