bug1893554.js (523B)
1 let g = newGlobal({ newCompartment: true }); 2 g.parent = this; 3 g.eval( 4 "(" + 5 function () { 6 Debugger(parent).onExceptionUnwind = function (frame) { 7 frame.older; 8 }; 9 } + 10 ")()" 11 ); 12 function f(x, y) { 13 try { 14 Object.setPrototypeOf( 15 y, 16 new Proxy(Object.getPrototypeOf(y), { 17 get(a, b, c) { 18 return undefined; 19 }, 20 }) 21 ); 22 } catch (e) {} 23 } 24 function h(x, y) { 25 f(x, y); 26 } 27 oomTest(function () { 28 h("", undefined); 29 h("", ""); 30 "".replaceAll(); 31 });