bug1404636.js (139B)
1 x = new Uint32Array(4); 2 try { 3 Math.max(Uint32Array.prototype)(); 4 } catch (e) {} 5 x[3] = -1; 6 assertEq(x.toString(), "0,0,0,4294967295");
tor-browserThe Tor Browser | |
| git clone https://git.dasho.dev/tor-browser.git | |
| Log | Files | Refs | README | LICENSE |