tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1620215.js (406B)

      1 function test(x) {
      2    for (var i = 0; i < 10; ++i) {
      3        // Create an IC specialized for lazy arguments when Baseline runs.
      4        arguments[0];
      5        // De-optimize lazy arguments by accessing an out-of-bounds argument.
      6        arguments[10];
      7 
      8        // Overwrite |arguments| to get a Value type.
      9        arguments = 0;
     10 
     11        for (var j = 0; j < 1500; j++) {}
     12        return;
     13    }
     14 }
     15 test(1);