tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

size-with-uninitialized.js (402B)

      1 // OOM during SharedArrayBuffer initialization can expose partially initialized
      2 // object to metadata builder.
      3 // It shouldn't crash.
      4 
      5 newGlobal({ newCompartment: true }).Debugger(this).memory.trackingAllocationSites = true;
      6 for (let i = 0; i < 9; i++) {
      7  oomTest(function () {
      8    class C extends WebAssembly.Memory {}
      9    new C({
     10      initial: 0,
     11      maximum: 1,
     12      shared: 1,
     13    });
     14  });
     15 }