Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | function C() { |
michael@0 | 2 | this.m = function () {}; // JSOP_SETMETHOD |
michael@0 | 3 | } |
michael@0 | 4 | |
michael@0 | 5 | var a = [new C, new C, new C, new C, new C, new C, new C, new C, new C]; |
michael@0 | 6 | var b = [new C, new C, new C, new C, new C, new C, a[8], new C, new C]; |
michael@0 | 7 | |
michael@0 | 8 | var thrown = 'none'; |
michael@0 | 9 | try { |
michael@0 | 10 | for (var i = 0; i < 9; i++) { |
michael@0 | 11 | a[i].m(); |
michael@0 | 12 | b[i].m = 0.7; // MethodWriteBarrier required here |
michael@0 | 13 | } |
michael@0 | 14 | } catch (exc) { |
michael@0 | 15 | thrown = exc.name; |
michael@0 | 16 | } |
michael@0 | 17 | assertEq(thrown, 'TypeError'); |