tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug1678785.js (532B)

      1 // This exposed a bug in CL's aarch64 isel, in which the -4098 was
      2 // incorrectly sign-extended out to 64 bits.
      3 
      4 let { exports } = new WebAssembly.Instance(new WebAssembly.Module(
      5    wasmTextToBinary(`
      6      (module
      7        (type (;0;) (func))
      8        (type (;1;) (func (result i32)))
      9        (type (;2;) (func (result i64)))
     10        (func (;0;) (type 0)
     11          i32.const -4098
     12          i32.load16_s offset=1
     13          drop)
     14        (memory (;0;) 1)
     15        (export "g" (func 0)))` )));
     16 try {
     17    exports.g();
     18 } catch (e) {}