tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

regress-96128-n.js (1529B)


      1 /* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */
      2 /* This Source Code Form is subject to the terms of the Mozilla Public
      3 * License, v. 2.0. If a copy of the MPL was not distributed with this
      4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
      5 
      6 /*
      7 * Date: 29 Aug 2001
      8 *
      9 * SUMMARY: Negative test that JS infinite recursion protection works.
     10 * We expect the code here to fail (i.e. exit code 3), but NOT crash.
     11 *
     12 * See http://bugzilla.mozilla.org/show_bug.cgi?id=96128
     13 */
     14 //-----------------------------------------------------------------------------
     15 var BUGNUMBER = 96128;
     16 var summary = 'Testing that JS infinite recursion protection works';
     17 
     18 
     19 function objRecurse()
     20 {
     21  /*
     22   * jband:
     23   *
     24   * Causes a stack overflow crash in debug builds of both the browser
     25   * and the shell. In the release builds this is safely caught by the
     26   * "too much recursion" mechanism. If I remove the 'new' from the code below
     27   * this is safely caught in both debug and release builds. The 'new' causes a
     28   * lookup for the Constructor name and seems to (at least) double the number
     29   * of items on the C stack for the given interpLevel depth.
     30   */
     31  return new objRecurse();
     32 }
     33 
     34 
     35 
     36 //-----------------------------------------------------------------------------
     37 test();
     38 //-----------------------------------------------------------------------------
     39 
     40 
     41 function test()
     42 {
     43  printBugNumber(BUGNUMBER);
     44  printStatus (summary);
     45 
     46  // we expect this to fail (exit code 3), but NOT crash. -
     47  var obj = new objRecurse();
     48 }