tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1263899.js (635B)

      1 try {
      2  evaluate(` 
      3    function runTestCase() $ERROR()
      4    function $ERROR() {
      5      throw Error
      6    }
      7    Object.defineProperty(this, "x", { value: 0 });
      8    setJitCompilerOption("baseline.warmup.trigger", 0);
      9    setJitCompilerOption("ion.warmup.trigger", 0)
     10  `)
     11  evaluate(`function f() {} f(x)`)
     12  runTestCase()
     13 } catch (exc) {}
     14 evaluate(`
     15  g = newGlobal({newCompartment: true})
     16  g.parent = this
     17  g.eval("(" + function() {
     18    Debugger(parent).onExceptionUnwind = function(frame) {
     19      frame.older
     20    }
     21  } + ")()")
     22  try { $ERROR() } catch(e){}
     23 `)
     24 try {
     25 evaluate(`
     26  x ^= null;
     27  if (x = 1)
     28    $ERROR()
     29 `);
     30 } catch(e) {}