array-iterator-detached.js 1.23 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13
// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Flags: --allow-natives-syntax

function Baseline() {
  let array = new Uint8Array([0, 1, 2, 3, 4, 5, 6, 7, 8, 9]);

  let it = array[Symbol.iterator]();
  assertEquals(0, it.next().value);
  assertEquals(1, it.next().value);
  assertEquals(2, it.next().value);
14
  %ArrayBufferDetach(array.buffer);
15 16 17 18 19
  it.next();
};
%NeverOptimizeFunction(Baseline);

assertThrows(Baseline, TypeError,
20
    "Cannot perform Array Iterator.prototype.next on a detached ArrayBuffer");
21 22 23 24 25 26 27 28 29 30 31 32 33 34

function Turbo(count = 10000) {
  let array = Array(10000);
  for (let i = 0; i < 10000; ++i) {
    array[i] = 254;
  }
  array[5000] = 255;
  array = new Uint8Array(array);

  let sum = 0;
  let it = array[Symbol.iterator]();
  for (let i = 0; i < count; ++i) {
    let result = it.next();
    if (result.value === 255) {
35
      %ArrayBufferDetach(array.buffer);
36 37 38 39 40 41
    }
    sum += result.value;
  }
  return sum;
}

42
%PrepareFunctionForOptimization(Turbo);
43 44 45 46 47
Turbo(10);
Turbo(10);
%OptimizeFunctionOnNextCall(Turbo);

assertThrows(Turbo, TypeError,
48
    "Cannot perform Array Iterator.prototype.next on a detached ArrayBuffer");