blob: 8a9fab3b732add30eb2daab066be23d0ccec3786 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
#include "gdb-tests.h"
#include "js/CompilationAndEvaluation.h"
#include "js/CompileOptions.h"
#include "js/RootingAPI.h"
#include "js/SourceText.h"
#include "js/Value.h"
#include "mozilla/Utf8.h"
#include "util/Text.h"
#include <string.h>
FRAGMENT(asmjs, segfault) {
constexpr unsigned line0 = __LINE__;
static const char chars[] =
"function f(glob, ffi, heap) {\n"
" \"use asm\";\n"
" var f32 = new glob.Float32Array(heap);\n"
" function g(n) {\n"
" n = n | 0;\n"
" return +f32[n>>2];\n"
" }\n"
" return g;\n"
"}\n"
"\n"
"var func = f(this, null, new ArrayBuffer(0x10000));\n"
"func(0x10000 << 2);\n"
"'ok'\n";
JS::CompileOptions opts(cx);
opts.setFileAndLine(__FILE__, line0 + 1);
opts.asmJSOption = JS::AsmJSOption::Enabled;
JS::SourceText<mozilla::Utf8Unit> srcBuf;
JS::Rooted<JS::Value> rval(cx);
bool ok =
srcBuf.init(cx, chars, js_strlen(chars), JS::SourceOwnership::Borrowed) &&
JS::Evaluate(cx, opts, srcBuf, &rval);
breakpoint();
use(ok);
use(rval);
}
|
