createRegExpMatchesArray does not respect inferred types
authorsbarati@apple.com <sbarati@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 4 Apr 2019 21:13:26 +0000 (21:13 +0000)
committersbarati@apple.com <sbarati@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 4 Apr 2019 21:13:26 +0000 (21:13 +0000)
commitba3eec2b54ec92c43abeafbba6712846ffa79c0d
tree6524c2aa384dec44ce92abe0384ed2a71fff108f
parent82965d62b63106c5107b568411cbd9fd950f05cf
createRegExpMatchesArray does not respect inferred types
https://bugs.webkit.org/show_bug.cgi?id=193287

Reviewed by Yusuke Suzuki.

This checks in the test case for 193287. This issue was discovered by
Samuel GroƟ of Google Project Zero.

* stress/inferred-types-regex-matches-array.js: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@243906 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JSTests/ChangeLog
JSTests/stress/inferred-types-regex-matches-array.js [new file with mode: 0644]