dom/plugins/test/crashtests/752340.html

Sat, 03 Jan 2015 20:18:00 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Sat, 03 Jan 2015 20:18:00 +0100
branch
TOR_BUG_3246
changeset 7
129ffea94266
permissions
-rw-r--r--

Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.

michael@0 1 <!DOCTYPE HTML>
michael@0 2 <html>
michael@0 3 <head>
michael@0 4 <script type="text/javascript">
michael@0 5 // Failures in this file can manifest as ###!!! ASSERTION: scope has non-empty map: '0 == mWrappedNativeMap->Count()'
michael@0 6 // followed by an Assertion failure: allocated() crash during the next GC.
michael@0 7 // It can also manifest as a leak.
michael@0 8 function breakthings() {
michael@0 9 var e = document.createElement("embed");
michael@0 10 var i = document.getElementById("i");
michael@0 11 i.contentDocument.body.appendChild(e);
michael@0 12 i.src = "about:blank";
michael@0 13 }
michael@0 14 </script>
michael@0 15 </head>
michael@0 16 <body onload="javascript:breakthings();">
michael@0 17 <iframe id="i" />
michael@0 18 </body>
michael@0 19 </html>

mercurial