Upload Kmake

deps/v8/test/mjsunit/regress/regress-crbug-743154.js

@@ -0,0 +1,24 @@
+// Copyright 2017 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+
+
+Object.prototype[1] = 1.5;
+
+var v = { length: 12, [1073741824]: 0 };
+
+assertEquals(['1073741824', 'length'], Object.keys(v));
+assertEquals(undefined, v[0]);
+assertEquals(1.5, v[1]);
+assertEquals(0, v[1073741824]);
+
+// Properly handle out of range HeapNumber keys on 32bit platforms.
+Array.prototype.sort.call(v);
+
+assertEquals(['0', '1073741824', 'length'], Object.keys(v));
+assertTrue(v.hasOwnProperty(0));
+assertEquals(1.5, v[0]);
+assertFalse(v.hasOwnProperty(1));
+assertEquals(1.5, v[1]);
+assertEquals(0, v[1073741824]);