bug1141329.js (230B)
1 x = [] 2 Object.defineProperty(x, 7, {}) 3 function f() { 4 "use strict" 5 x.length = { 6 valueOf: function() { 7 return 7 8 } 9 } 10 } 11 for (var m = 0; m < 9; m++) { 12 try { 13 f() 14 } catch (e) {} 15 }
tor-browserThe Tor Browser | |
| git clone https://git.dasho.dev/tor-browser.git | |
| Log | Files | Refs | README | LICENSE |