Upload Kmake

deps/v8/test/mjsunit/regress/wasm/regress-9759.js

@@ -0,0 +1,26 @@
+// Copyright 2019 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --no-liftoff --no-force-slow-path
+
+d8.file.execute("test/mjsunit/wasm/wasm-module-builder.js");
+
+// This constant was chosen as it is the smallest number of cases that still
+// triggers the input count overflow. The new limit put into place is smaller.
+const NUM_CASES = 0xfffd;
+
+(function TestBrTableTooLarge() {
+  let builder = new WasmModuleBuilder();
+  let cases = new Array(NUM_CASES).fill(0);
+  builder.addFunction('main', kSig_v_i)
+      .addBody([].concat([
+        kExprBlock, kWasmVoid,
+          kExprLocalGet, 0,
+          kExprBrTable], wasmSignedLeb(NUM_CASES),
+          cases, [0,
+        kExprEnd
+      ])).exportFunc();
+  assertThrows(() => new WebAssembly.Module(builder.toBuffer()),
+    WebAssembly.CompileError, /invalid table count/);
+})();