tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug799185-8.js (446B)


      1 // |jit-test| error: TypeError
      2 function testBitOrInconvertibleObjectInconvertibleObject() {
      3  var o1 = {};
      4  var count2 = 0;
      5  function toString2() {
      6        ++count2;
      7        if (count2 == 95) return {};
      8  }
      9  var o2 = { toString: toString2 };
     10  try {
     11    for (var i = 0; i < 100; i++)
     12        var q = o1 | o2;
     13  } catch (e)  {
     14    if (i !== 94)
     15      return gc();
     16    this.bar.foo ^ this
     17  }
     18 }
     19 testBitOrInconvertibleObjectInconvertibleObject()