Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | // This was the actual bug |
michael@0 | 2 | assertRaises(StopIteration, function() { |
michael@0 | 3 | Iterator.prototype.next(); |
michael@0 | 4 | Iterator.prototype.next(); |
michael@0 | 5 | }); |
michael@0 | 6 | |
michael@0 | 7 | // The error should have triggered here, but was masked by a latent bug |
michael@0 | 8 | assertRaises(StopIteration, function() { |
michael@0 | 9 | Iterator.prototype.next(); |
michael@0 | 10 | }); |
michael@0 | 11 | |
michael@0 | 12 | // Found by fuzzing |
michael@0 | 13 | assertRaises(StopIteration, function() { |
michael@0 | 14 | (new Iterator({})).__proto__.next(); |
michael@0 | 15 | }); |
michael@0 | 16 | |
michael@0 | 17 | |
michael@0 | 18 | function assertRaises(exc, callback) { |
michael@0 | 19 | var caught = false; |
michael@0 | 20 | try { |
michael@0 | 21 | callback(); |
michael@0 | 22 | } catch (e) { |
michael@0 | 23 | assertEq(e instanceof StopIteration, true); |
michael@0 | 24 | caught = true; |
michael@0 | 25 | } |
michael@0 | 26 | assertEq(caught, true); |
michael@0 | 27 | } |