mirror of
https://github.com/nodejs/node.git
synced 2025-05-22 22:11:41 +00:00
edd537ca2f
PR-URL: https://github.com/nodejs/node/pull/45230 Reviewed-By: Jiawen Geng <technicalcute@gmail.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
38 lines
817 B
JavaScript
38 lines
817 B
JavaScript
// Copyright 2022 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --fuzzing
|
|
|
|
|
|
let v0 = -1.7976931348623157e+308;
|
|
const v4 = d8.serializer.serialize(v0);
|
|
const v5 = new Uint8Array(v4);
|
|
v5[2] = 73;
|
|
try {
|
|
d8.serializer.deserialize(v4);
|
|
} catch(e) { }
|
|
|
|
|
|
function test(length) {
|
|
const str = /\dei7/sgiuy;
|
|
const obj = {"a":str, "length":length};
|
|
const increment = 2061353130;
|
|
let n = increment * 21;
|
|
for (let i = 0; i < 52; i++) {
|
|
n += increment;
|
|
try {
|
|
const v9 = d8.serializer.serialize(obj);
|
|
const v10 = new Uint8Array(v9);
|
|
v10[6] = n;
|
|
const v11 = d8.serializer.deserialize(v9);
|
|
} catch(v12) {
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
test(9007199254740991);
|
|
test(0xFFFFFFFFFFFF3F43);
|