tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

regress-319683.js (812B)

      1 /* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */
      2 /* This Source Code Form is subject to the terms of the Mozilla Public
      3 * License, v. 2.0. If a copy of the MPL was not distributed with this
      4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
      5 
      6 //-----------------------------------------------------------------------------
      7 var BUGNUMBER = 319683;
      8 var summary = 'Do not crash in call_enumerate';
      9 var actual = 'No Crash';
     10 var expect = 'No Crash';
     11 printBugNumber(BUGNUMBER);
     12 printStatus (summary);
     13 
     14 function crash(){
     15  function f(){
     16    var x;
     17    function g(){
     18      x=1; //reference anything here or will not crash.
     19    }
     20  }
     21 
     22  //apply an object to the __proto__ attribute
     23  f.__proto__={};
     24 
     25  //the following call will cause crash
     26  f();
     27 } 
     28 
     29 crash();
     30 
     31 reportCompare(expect, actual, summary);