bug1221378.js (742B)
1 // Bug 1221378: allocating an array from within the object metadata callback 2 // shouldn't cause re-entrant resolution of lazy prototypes. 3 4 // To test for this regression, we need some way to make the code that collects 5 // metadata about object allocations allocate an Array. Presently, 6 // enableShellObjectMetadataCallback installs a callback that does this, but if 7 // that hook gets removed (in production there's only ever one callback we 8 // actually use), then the ability to make whatever metadata collection code 9 // remains allocate an Array will cover this regression. For example, it could 10 // be a flag that one can only set in debug builds from TestingFunctions.cpp. 11 newGlobal().eval('enableShellAllocationMetadataBuilder(); Array');