Upload Kmake

deps/v8/test/mjsunit/regress/wasm/regress-12874.js

@@ -0,0 +1,44 @@
+// Copyright 2022 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --no-liftoff --no-wasm-inlining-call-indirect
+
+d8.file.execute("test/mjsunit/wasm/wasm-module-builder.js");
+
+var builder = new WasmModuleBuilder();
+
+builder.startRecGroup();
+var sig_index = builder.addType({params: [kWasmStructRef],
+                                 results: [kWasmI32]});
+var sub1 = builder.addStruct([makeField(kWasmI32, true)]);
+var sub2 = builder.addStruct([makeField(kWasmI32, false)]);
+builder.endRecGroup();
+
+builder.addFunction('producer', makeSig([], [kWasmStructRef]))
+  .addBody([
+    kExprI32Const, 10,
+    kGCPrefix, kExprStructNew, sub1])
+  .exportFunc();
+
+builder.addFunction('main', sig_index)
+  .addBody([
+    // Cast to sub1 and write field 0.
+    kExprLocalGet, 0,
+    kGCPrefix, kExprRefCast, sub1,
+    kExprI32Const, 42,
+    kGCPrefix, kExprStructSet, sub1, 0,
+    // Cast to sub2 and read field 0.
+    kExprLocalGet, 0,
+    kGCPrefix, kExprRefCast, sub2,
+    kGCPrefix, kExprStructGet, sub2, 0])
+  .exportFunc();
+
+var instance = builder.instantiate();
+
+try {
+  instance.exports.main(instance.exports.producer());
+  console.log(`Failure: expected trap`);
+} catch (e) {
+  console.log(`Success: trapped: ${e}`);
+}