Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | function test(name, fn, val) { |
michael@0 | 2 | gc(); |
michael@0 | 3 | var ok = {}, bad = {}; |
michael@0 | 4 | bad.__defineSetter__(name, fn); |
michael@0 | 5 | var arr = [ok, ok, ok, ok, ok, bad]; |
michael@0 | 6 | |
michael@0 | 7 | var log = ''; |
michael@0 | 8 | try { |
michael@0 | 9 | for (var i = 0; i < arr.length; i++) { |
michael@0 | 10 | arr[i][name] = val; |
michael@0 | 11 | log += '.'; |
michael@0 | 12 | } |
michael@0 | 13 | } catch (exc) { |
michael@0 | 14 | log += 'E'; |
michael@0 | 15 | } |
michael@0 | 16 | assertEq(log, '.....E'); |
michael@0 | 17 | } |
michael@0 | 18 | |
michael@0 | 19 | test("x", Function.prototype.call, null); // TypeError: Function.prototype.call called on incompatible [object Object] |
michael@0 | 20 | test("y", Array, 0.1); // RangeError: invalid array length |
michael@0 | 21 | test(1, Function.prototype.call, null); // TypeError: Function.prototype.call called on incompatible [object Object] |
michael@0 | 22 | test(1, Array, 0.1); // RangeError: invalid array length |