bug648567.js (219B)
1 var arr = [-10, true]; 2 true || arr[0]; 3 4 function g() { 5 var x = arr[12]; 6 var y = arr.length; 7 arr[undefined] = x; 8 assertEq(y, 2); 9 } 10 { 11 function f() { 12 gc(); 13 g(); 14 } 15 f(); 16 }
tor-browserThe Tor Browser | |
| git clone https://git.dasho.dev/tor-browser.git | |
| Log | Files | Refs | README | LICENSE |