tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug616508.js (502B)


      1 // |jit-test| error: ReferenceError
      2 // vim: set ts=8 sts=4 et sw=4 tw=99:
      3 
      4 // Note: modified from original test, which used Uint32Array in place of Array,
      5 // because the behavior has changed in a way that this will throw a TypeError
      6 // before it gets to testing what used to crash. I have no idea whether this
      7 // would actually crash the original version it was written for.
      8 try {
      9    (function () {
     10        __proto__ = Array()
     11    }())
     12 } catch (e) {}(function () {
     13    length, ([eval()] ? x : 7)
     14 })()