blob: d691cc929f66f9c6130cf5745a3fe5ed88d9b288 (
plain)
1
2
3
4
5
6
7
8
9
10
|
// |jit-test| allow-oom
// array.splice should throw if array.length is too large.
var length = 4294967295;
var array = new Array(length);
// Disable any fast paths by adding an indexed property on the prototype chain.
Array.prototype[0] = 0;
array.splice(100);
|
