Index: test/mjsunit/wasm/grow-memory.js |
diff --git a/test/mjsunit/wasm/grow-memory.js b/test/mjsunit/wasm/grow-memory.js |
index d15cd935df03ac4e3090e78e1fe65e24d4f8f23a..ec87b85ad36ed28f376c61440df701649b7d4c1f 100644 |
--- a/test/mjsunit/wasm/grow-memory.js |
+++ b/test/mjsunit/wasm/grow-memory.js |
@@ -2,7 +2,7 @@ |
// Use of this source code is governed by a BSD-style license that can be |
// found in the LICENSE file. |
-// Flags: --expose-wasm --expose-gc --stress-compaction |
+// Flags: --expose-wasm --stress-compaction |
load("test/mjsunit/wasm/wasm-constants.js"); |
load("test/mjsunit/wasm/wasm-module-builder.js"); |
@@ -441,3 +441,20 @@ function testGrowMemoryOutOfBoundsOffset() { |
} |
testGrowMemoryOutOfBoundsOffset(); |
+ |
+function testGrowMemoryOutOfBoundsOffset2() { |
+ var builder = new WasmModuleBuilder(); |
+ builder.addMemory(16, 128, false); |
+ builder.addFunction("main", kSig_v_v) |
+ .addBody([ |
+ kExprI32Const, 20, |
+ kExprI32Const, 29, |
+ kExprGrowMemory, |
+ kExprI32StoreMem, 0, 0xFF, 0xFF, 0xFF, 0x3a |
+ ]) |
+ .exportAs("main"); |
+ var module = builder.instantiate(); |
+ assertTraps(kTrapMemOutOfBounds, module.exports.main); |
+} |
+ |
+testGrowMemoryOutOfBoundsOffset2(); |