| Index: test/mjsunit/wasm/grow-memory.js
|
| diff --git a/test/mjsunit/wasm/grow-memory.js b/test/mjsunit/wasm/grow-memory.js
|
| index d15cd935df03ac4e3090e78e1fe65e24d4f8f23a..ec87b85ad36ed28f376c61440df701649b7d4c1f 100644
|
| --- a/test/mjsunit/wasm/grow-memory.js
|
| +++ b/test/mjsunit/wasm/grow-memory.js
|
| @@ -2,7 +2,7 @@
|
| // Use of this source code is governed by a BSD-style license that can be
|
| // found in the LICENSE file.
|
|
|
| -// Flags: --expose-wasm --expose-gc --stress-compaction
|
| +// Flags: --expose-wasm --stress-compaction
|
|
|
| load("test/mjsunit/wasm/wasm-constants.js");
|
| load("test/mjsunit/wasm/wasm-module-builder.js");
|
| @@ -441,3 +441,20 @@ function testGrowMemoryOutOfBoundsOffset() {
|
| }
|
|
|
| testGrowMemoryOutOfBoundsOffset();
|
| +
|
| +function testGrowMemoryOutOfBoundsOffset2() {
|
| + var builder = new WasmModuleBuilder();
|
| + builder.addMemory(16, 128, false);
|
| + builder.addFunction("main", kSig_v_v)
|
| + .addBody([
|
| + kExprI32Const, 20,
|
| + kExprI32Const, 29,
|
| + kExprGrowMemory,
|
| + kExprI32StoreMem, 0, 0xFF, 0xFF, 0xFF, 0x3a
|
| + ])
|
| + .exportAs("main");
|
| + var module = builder.instantiate();
|
| + assertTraps(kTrapMemOutOfBounds, module.exports.main);
|
| +}
|
| +
|
| +testGrowMemoryOutOfBoundsOffset2();
|
|
|