Index: test/mjsunit/json-parser-recursive.js |
diff --git a/test/mjsunit/regress/regress-crbug-119926.js b/test/mjsunit/json-parser-recursive.js |
similarity index 92% |
copy from test/mjsunit/regress/regress-crbug-119926.js |
copy to test/mjsunit/json-parser-recursive.js |
index 1ad250a2b83f46552584beef0c3d12521f0c921d..1e00c83c87f33b105acd076fbbc4c9316bafbef2 100644 |
--- a/test/mjsunit/regress/regress-crbug-119926.js |
+++ b/test/mjsunit/json-parser-recursive.js |
@@ -25,11 +25,9 @@ |
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
-// Flags: --gc-global |
- |
-// Test that array elements don't break upon garbage collection. |
- |
-var a = new Array(500); |
+var str = "[1]"; |
for (var i = 0; i < 100000; i++) { |
- a[i] = new Object(); |
+ str = "[1," + str + "]"; |
} |
+ |
+assertThrows(function() { JSON.parse(str); }, RangeError); |