tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug-1444604.js (547B)


      1 // Fuzz test: LiveSavedFrameCache should not be confused by eval-in-frame-prev links.
      2 // See bug-144604-reduced.js for a more direct version.
      3 
      4 var evalInFrame = (function (global) {
      5  var dbgGlobal = newGlobal({newCompartment: true});
      6  var dbg = new dbgGlobal.Debugger();
      7  return function evalInFrame(upCount, code) {
      8    dbg.addDebuggee(global);
      9    var frame = dbg.getNewestFrame().older;
     10    for (var i = 0; i < upCount; i++) {
     11    }
     12    var completion = frame.eval(code);
     13  };
     14 })(this);
     15 enableTrackAllocations();
     16 evalInFrame(1, "print(a)");