tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1314545.js (600B)


      1 function f() {
      2    Object.prototype[0] = 10;
      3 
      4    var arr = [];
      5    for (var i=3; i<20; i++) {
      6        arr[0] = i;
      7        Object.freeze(arr);
      8        while (!inIon()) {}
      9    }
     10    assertEq(arr[0], 3);
     11 }
     12 f();
     13 
     14 function g() {
     15    var c = 0;
     16    Object.defineProperty(Object.prototype, 18, {set: function() { c++; }});
     17 
     18    var arrays = [];
     19    for (var i=0; i<2; i++)
     20        arrays.push([1, 2]);
     21 
     22    for (var i=0; i<20; i++) {
     23        arrays[0][i] = 1;
     24        arrays[1][i] = 2;
     25        if (i === 0)
     26            Object.freeze(arrays[0]);
     27        while (!inIon()) {}
     28    }
     29    assertEq(c, 2);
     30 }
     31 g();