git://git.webkit.org
/
WebKit-https.git
/ blob
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
history
|
raw
|
HEAD
constructArray() should always allocate the requested length.
[WebKit-https.git]
/
JSTests
/
stress
/
regress-187543-2.js
1
// This test should not crash.
2
3
Object.defineProperty(Object.prototype, 0, { set() {} });
4
5
var foo = Function.bind.call(new Proxy(Array, {}));
6
for (var i = 10; i < 50; ++i) {
7
var args = Array(i).fill(i);
8
new foo(...args);
9
gc()
10
}