tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

commit 844d6e8977cfaa0d7f27daf60dfcf08f29571e34
parent 41d71b9a98260f9a612704e03ae1a31480fa4486
Author: Steve Fink <sfink@mozilla.com>
Date:   Sun, 16 Nov 2025 18:40:43 +0000

Bug 1999768 - Allow out of memory on weird 32-bit overflow fuzz test r=spidermonkey-reviewers,dminor

Differential Revision: https://phabricator.services.mozilla.com/D272740

Diffstat:
Mjs/src/jit-test/tests/bug1782468-ptrdiff-veclen.js | 3++-
1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/js/src/jit-test/tests/bug1782468-ptrdiff-veclen.js b/js/src/jit-test/tests/bug1782468-ptrdiff-veclen.js @@ -8,6 +8,7 @@ try { assertEq(true, false, "allocation overflow expected"); } catch (e) { if (getBuildConfiguration("pointer-byte-size") == 4) { - assertEq((e + "").includes("InternalError: allocation size overflow"), true); + const msg = e + ""; + assertEq(msg.includes("out of memory") || msg.includes("InternalError: allocation size overflow"), true); } // else on 64-bit, it will be a SyntaxError for invalid code. }