tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

pop-nonwritable-length-denseinitializedlength-below-length.js (1138B)


      1 load(libdir + "asserts.js");
      2 
      3 function f(arr)
      4 {
      5  assertEq(arr.pop(), undefined); // if it doesn't throw
      6 }
      7 
      8 var N = 100;
      9 
     10 function basic(out)
     11 {
     12  // Create an array of arrays, to be iterated over for [].pop-calling.  We
     13  // can't just loop on pop on a single array with non-writable length because
     14  // pop throws when called on an array with non-writable length.
     15  var arrs = out.arrs = [];
     16  for (var i = 0; i < N; i++)
     17  {
     18    var arr = [0, 1, 2, 3, 4];
     19    arr.length = 6;
     20    arrs.push(arr);
     21  }
     22 
     23  var a = [0, 1, 2, 3, 4];
     24  Object.defineProperty(a, "length", { writable: false, value: 6 });
     25 
     26  arrs.push(a);
     27 
     28  for (var i = 0, sz = arrs.length; i < sz; i++)
     29    f(arrs[i]);
     30 }
     31 
     32 var obj = {};
     33 var arrs, a;
     34 
     35 assertThrowsInstanceOf(function() { basic(obj); }, TypeError);
     36 
     37 var arrs = obj.arrs;
     38 assertEq(arrs.length, N + 1);
     39 for (var i = 0; i < N; i++)
     40 {
     41  assertEq(arrs[i].length, 5, "unexpected length for arrs[" + i + "]");
     42  assertEq(arrs[i].hasOwnProperty(5), false,
     43           "element not deleted for arrs[" + i + "]");
     44 }
     45 
     46 var a = arrs[N];
     47 assertEq(a.hasOwnProperty(5), false);
     48 assertEq(a[5], undefined);
     49 assertEq(a.length, 6);