tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1527148.js (256B)

      1 var log = "";
      2 function g() {
      3    var x = [];
      4    for (var k = 0; k < 2; ++k) {
      5        x.push(k);
      6    }
      7    log += x;
      8 }
      9 for (var i = 0; i < 1; i++) {
     10    f = function() {};
     11 }
     12 g();
     13 Array.prototype.push = f;
     14 g();
     15 f.__proto__ = [];
     16 g();
     17 assertEq(log, "0,1");