mirror of
https://github.com/bellard/quickjs.git
synced 2026-03-31 20:28:01 +00:00
25 lines
512 B
JavaScript
25 lines
512 B
JavaScript
|
/*---
|
||
|
|
features: [skip-if-tcc]
|
||
|
|
---*/
|
||
|
|
|
||
|
|
import {assert} from "./assert.js"
|
||
|
|
|
||
|
|
const rab = new ArrayBuffer(1024, { maxByteLength: 1024 * 1024 });
|
||
|
|
const i32 = new Int32Array(rab);
|
||
|
|
const evil = {
|
||
|
|
valueOf: () => {
|
||
|
|
rab.resize(0);
|
||
|
|
return 123;
|
||
|
|
}
|
||
|
|
};
|
||
|
|
try {
|
||
|
|
Atomics.add(i32, 0, evil);
|
||
|
|
// Atomics.sub(i32, 0, evil);
|
||
|
|
// Atomics.and(i32, 0, evil);
|
||
|
|
// Atomics.or(i32, 0, evil);
|
||
|
|
// Atomics.xor(i32, 0, evil);
|
||
|
|
throw Error("Should not get here");
|
||
|
|
} catch (e) {
|
||
|
|
assert(e instanceof RangeError);
|
||
|
|
}
|