bug639311.js (282B)
1 /* Avoid use-after-free while sweeping type objects. */ 2 3 try { 4 Reflparse("") 5 } catch(e) {} 6 Reflect.parse("for(var a;a;j){if(a%2==0){c()}}") 7 try { 8 (function() { 9 for (a = 0;; j) { 10 gc() 11 } 12 })() 13 } catch(e) { 14 delete this.Math 15 } 16 gc() 17 Reflect.parse("{ let x; }") 18 gc()