tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bailout-with-object-or-null.js (266B)


      1 function foo(p) {
      2    this.f = p;
      3 }
      4 function use(v, a, b) {
      5    var f = v.f;
      6    g = f;
      7    g = a + b;
      8    if (f != null)
      9        return;
     10 }
     11 
     12 with({}){}
     13 
     14 for (var i = 0; i < 2000; i++)
     15    use(new foo(i % 2 ? {} : null), 1, 2);
     16 use(new foo(null), 2147483548, 1000);