f1e0b83e7bPR-URL: https://github.com/nodejs/node/pull/61898 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
24 lines
679 B
JavaScript
24 lines
679 B
JavaScript
// Copyright 2026 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --track-array-buffer-views
|
|
|
|
// Update map with detach transition and properties
|
|
(() => {
|
|
let ab = new ArrayBuffer();
|
|
let ta = new Int32Array(ab);
|
|
ta[undefined] = undefined;
|
|
%ArrayBufferDetach(ab);
|
|
let ta2 = new Int32Array();
|
|
ta2[undefined] = undefined;
|
|
Object.defineProperty(ta2, undefined, {value: {}});
|
|
})();
|
|
|
|
// Update detached map
|
|
(function () {
|
|
let ab = new ArrayBuffer();
|
|
let ta = new Int32Array(ab);
|
|
%ArrayBufferDetach(ab);
|
|
ta.__proto__ = {};
|
|
})();
|