tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

array-length-exceeds-int32-fuse-invalidation.js (319B)

      1 function maybeInvalidate(arr, i) {
      2  with (this) {} // Don't Ion-compile.
      3  if (i === 1950) {
      4    arr.length = 2147483648;
      5  }
      6 }
      7 function test() {
      8  var arr = [];
      9  var result = 0;
     10  for (var i = 0; i < 2000; i++) {
     11    result += arr.length;
     12    maybeInvalidate(arr, i);
     13  }
     14  assertEq(result, 105226698752);
     15 }
     16 test();