third_party/v8/test/mjsunit/regress/wasm/regress-834693.js

// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// flags: --wasm-lazy-compilation

load("test/mjsunit/wasm/wasm-module-builder.js");

var module = new WasmModuleBuilder();
module.addMemory();
module.addFunction("main", kSig_v_v)
  .addBody([
    kExprI32Const, 20,
    kExprI32Const, 29,
    kExprMemoryGrow, kMemoryZero,
    kExprI32StoreMem, 0, 0xFF, 0xFF, 0x7A])
  .exportAs("main");
var instance = module.instantiate();
assertTraps(kTrapMemOutOfBounds, instance.exports.main);