tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

clone-invalid-property-key.js (1017B)

      1 // Don't allow serialized data to use objects as property keys.
      2 
      3 if (typeof serialize === "function") {
      4    let data = new Uint8Array([
      5        104,97,108,101,7,0,255,255,95,98,0,0,0,0,0,104,97,108,101,9,0,255,255,95,98,
      6        115,10,109,97,120,95,108,101,110,0,0,0,0,109,97,120,95,108,101,110,0,0,0,0,0,
      7        0,0,0,0,246,0,0,0,42,4,0,0,0,0,0,0,0,0,0,0,0,0,65,0,0,0,0,0,0,0,0,0,0,0,0,0,
      8        0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,253,0,0,0,0,0,0,0,0,0,0,0,0,
      9        191,190,190,184,65,65,65,65,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
     10        0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,104,97,108,101,9,0,
     11        255,255,95,98,115,10,109,97,120,95,110,100,108,213,95,175,175,175,175,175,0,
     12        0,0,0,0,2,0,0,0,0,0,13,0,255,255,96,125,115,135,109,97,120,110,0,0,32,0,8,0,
     13        0,0
     14    ]);
     15    let cloneBuffer = serialize(null);
     16    cloneBuffer.clonebuffer = data.buffer;
     17    try {
     18        let obj = deserialize(cloneBuffer);
     19    } catch(exc1) {}
     20 }
     21 
     22 reportCompare(0, 0);