regress-366122.js (1101B)
1 /* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */ 2 /* This Source Code Form is subject to the terms of the Mozilla Public 3 * License, v. 2.0. If a copy of the MPL was not distributed with this 4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ 5 6 //----------------------------------------------------------------------------- 7 var BUGNUMBER = 366122; 8 var summary = 'Compile large script'; 9 var actual = 'No Crash'; 10 var expect = 'No Crash'; 11 12 13 //----------------------------------------------------------------------------- 14 test(); 15 //----------------------------------------------------------------------------- 16 17 function test() 18 { 19 printBugNumber(BUGNUMBER); 20 printStatus (summary); 21 22 function exploit() { 23 var code = "", obj = {}; 24 for(var i = 0; i < 0x10000; i++) { 25 if(i == 10242) { 26 code += "void 0x10000050505050;\n"; 27 } else { 28 code += "void 'x" + i + "';\n"; 29 } 30 } 31 code += "export undefined;\n"; 32 code += "void 125;\n"; 33 eval(code); 34 } 35 try 36 { 37 exploit(); 38 } 39 catch(ex) 40 { 41 } 42 reportCompare(expect, actual, summary); 43 }