nodejs
diff --git a/‎common.gypi‎
Lines changed: 1 addition & 1 deletion b/‎common.gypi‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎deps/v8/src/objects/bigint.cc‎
Lines changed: 2 additions & 0 deletions b/‎deps/v8/src/objects/bigint.cc‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎deps/v8/test/mjsunit/regress/regress-crbug-1151890.js‎
Lines changed: 11 additions & 0 deletions b/‎deps/v8/test/mjsunit/regress/regress-crbug-1151890.js‎
Lines changed: 11 additions & 0 deletions
@@ -36,7 +36,7 @@
 
     # Reset this number to 0 on major V8 upgrades.
     # Increment by one for each non-official patch applied to deps/v8.
-    'v8_embedder_string': '-node.39',
+    'v8_embedder_string': '-node.40',
 
     ##### V8 defaults for Node.js #####
 
 
@@ -1862,6 +1862,8 @@ Handle<BigInt> MutableBigInt::RightShiftByAbsolute(Isolate* isolate,
   DCHECK_LE(result_length, length);
   Handle<MutableBigInt> result = New(isolate, result_length).ToHandleChecked();
   if (bits_shift == 0) {
+    // Zero out any overflow digit (see "rounding_can_overflow" above).
+    result->set_digit(result_length - 1, 0);
     for (int i = digit_shift; i < length; i++) {
       result->set_digit(i - digit_shift, x->digit(i));
     }
 
@@ -0,0 +1,11 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+for (let i = 0, j = 0; i < 10; ++i) {
+  let x = (-0xffffffffffffffff_ffffffffffffffffn >> 0x40n);
+  assertEquals(-0x10000000000000000n, x);
+  %SimulateNewspaceFull();
+}
Original file line number	Diff line number	Diff line change
@@ -1862,6 +1862,8 @@ Handle<BigInt> MutableBigInt::RightShiftByAbsolute(Isolate* isolate,
1862	1862	DCHECK_LE(result_length, length);
1863	1863	Handle<MutableBigInt> result = New(isolate, result_length).ToHandleChecked();
1864	1864	if (bits_shift == 0) {
	1865	+ // Zero out any overflow digit (see "rounding_can_overflow" above).
	1866	+ result->set_digit(result_length - 1, 0);
1865	1867	for (int i = digit_shift; i < length; i++) {
1866	1868	result->set_digit(i - digit_shift, x->digit(i));
1867	1869	}