tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1264961.js (594B)


      1 // |jit-test| slow
      2 
      3 loadFile(`
      4  var o = {}
      5  var global = this;
      6  var p = new Proxy(o, {
      7    "deleteProperty": function (await , key) {
      8      var g = newGlobal({sameZoneAs: this});
      9      g.parent = global;
     10      g.eval("var dbg = new Debugger(parent); dbg.onEnterFrame = function(frame) {};");
     11    }
     12  })
     13  for (var i=0; i<100; i++);
     14  assertEq(delete p.foo, true);
     15 `);
     16 function loadFile(lfVarx) {
     17    var k = 0;
     18    oomTest(function() {
     19        // In practice a crash occurs before iteration 4000.
     20        if (k++ <= 4000)
     21          eval(lfVarx);
     22    }, {expectExceptionOnFailure: false});
     23 }