tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug641491.js (259B)

      1 function f1() {
      2 }
      3 function f2() {
      4 }
      5 function f3(o) {
      6    f2 = Date.prototype;
      7 }
      8 var key = Object.getOwnPropertyNames(f1)[30];
      9 if(key) {
     10    f3 = f1[key];
     11 }
     12 gc(); 
     13 gc();
     14 try {
     15 for(var i=0; i<10; i++) {
     16    delete f2[1];
     17    f3(function() {});
     18 }
     19 } catch (e) {}