tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

waitAsync-references.js (275B)

      1 // The OOM during the construction or any step should clear the references
      2 // between the waiters and tasks, and shouldn't result in UAF.
      3 function f() {
      4  var x = new Int32Array(new SharedArrayBuffer(4));
      5  x[0] = 1;
      6  Atomics.waitAsync(x, 0, 1, 65535);
      7  oomTest(f);
      8 }
      9 f();