tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

sink-in-recovered-object.js (305B)


      1 setJitCompilerOption("ion.warmup.trigger", 30);
      2 
      3 var arr = [];
      4 function f (cond, a) {
      5  var obj = { a: 0 };
      6  var x = 2 * a + 1;
      7  if (cond) {
      8    obj.a = x;
      9    arr.push(obj.a);
     10    obj.a = 1;
     11  } else {
     12    obj.a = 1;
     13  }
     14  return obj.a;
     15 }
     16 
     17 for (var i = 0; i < 100; i++) {
     18  assertEq(f(i % 2, i), 1);
     19 }