Skip to content

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
    • Help
    • Contribute to GitLab
  • Sign in / Register
V
V8
  • Project
    • Project
    • Details
    • Activity
    • Cycle Analytics
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Charts
  • Issues 0
    • Issues 0
    • List
    • Board
    • Labels
    • Milestones
  • Merge Requests 0
    • Merge Requests 0
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
    • Charts
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Charts
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • Linshizhi
  • V8
  • Repository

Switch branch/tag
  • v8
  • test
  • mjsunit
  • regress
  • regress-10931.js
Find file
BlameHistoryPermalink
  • Jakob Kummerow's avatar
    [typedarray] Throw rather than crash when too large to sort · 6c07d6e3
    Jakob Kummerow authored Sep 30, 2020
    Sorting a TypedArray with a custom compare function requires us to
    copy the array's contents to a FixedArray. When the TypedArray is
    larger than FixedArray::kMaxLength, we should throw a RangeError
    rather than crashing with an OOM message.
    
    Fixed: v8:10931
    Change-Id: I8a27cc0ac80a9172bc5e8e154fdf4ccce5974317
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2440575
    Commit-Queue: Jakob Kummerow <jkummerow@chromium.org>
    Auto-Submit: Jakob Kummerow <jkummerow@chromium.org>
    Reviewed-by: 's avatarIgor Sheludko <ishell@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#70232}
    6c07d6e3
regress-10931.js 496 Bytes
EditWeb IDE

Replace regress-10931.js

Attach a file by drag & drop or click to upload


Cancel
A new branch will be created in your fork and a new merge request will be started.