// Copyright 2016 the V8 project authors. All rights reserved.// Use of this source code is governed by a BSD-style license that can be// found in the LICENSE file.// Trigger an infinite loop through RegExp.prototype[@@match], which results// in unbounded growth of the results array.// Limit the number of iterations to avoid OOM while still triggering large// object space allocation.constmin_ptr_size=4;constmax_regular_heap_object_size=507136;constnum_iterations=max_regular_heap_object_size/min_ptr_size;constRegExpPrototypeExec=RegExp.prototype.exec;leti=0;RegExp.prototype.__defineGetter__("global",()=>true);RegExp.prototype.exec=function(str){return(i++<num_iterations)?RegExpPrototypeExec.call(this,str):null;};"a".match();