regress-363988.js (1192B)
1 /* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */ 2 /* This Source Code Form is subject to the terms of the Mozilla Public 3 * License, v. 2.0. If a copy of the MPL was not distributed with this 4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ 5 6 //----------------------------------------------------------------------------- 7 var BUGNUMBER = 363988; 8 var summary = 'Do not crash at JS::GetPrivate with large script'; 9 var actual = 'No Crash'; 10 var expect = 'No Crash'; 11 12 13 //----------------------------------------------------------------------------- 14 test(); 15 //----------------------------------------------------------------------------- 16 17 function test() 18 { 19 printBugNumber(BUGNUMBER); 20 printStatus (summary); 21 22 function crash() { 23 var town = new Array; 24 25 for (var i = 0; i < 0x4001; ++i) { 26 var si = String(i); 27 town[i] = [ si, "x" + si, "y" + si, "z" + si ]; 28 } 29 30 return "town=" + JSON.stringify(town) + ";function f() {}"; 31 } 32 33 if (typeof document != "undefined") 34 { 35 // this is required to reproduce the crash. 36 document.write("<script>", crash(), "<\/script>"); 37 } 38 else 39 { 40 crash(); 41 } 42 43 reportCompare(expect, actual, summary); 44 }