Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | // The arguments can escape from a function via a debugging hook. |
michael@0 | 2 | |
michael@0 | 3 | var g = newGlobal(); |
michael@0 | 4 | var dbg = new Debugger(g); |
michael@0 | 5 | |
michael@0 | 6 | // capture arguments object and test function |
michael@0 | 7 | var args, testfn; |
michael@0 | 8 | dbg.onDebuggerStatement = function (frame) { |
michael@0 | 9 | args = frame.eval("arguments").return; |
michael@0 | 10 | testfn = frame.eval("test").return; |
michael@0 | 11 | }; |
michael@0 | 12 | g.eval("function f() { debugger; }"); |
michael@0 | 13 | g.eval("var test = " + function test(args) { |
michael@0 | 14 | assertEq(args.length, 3); |
michael@0 | 15 | assertEq(args[0], this); |
michael@0 | 16 | assertEq(args[1], f); |
michael@0 | 17 | assertEq(args[2].toString(), "[object Object]"); |
michael@0 | 18 | return 42; |
michael@0 | 19 | } + ";"); |
michael@0 | 20 | g.eval("f(this, f, {});"); |
michael@0 | 21 | |
michael@0 | 22 | var cv = testfn.apply(null, [args]); |
michael@0 | 23 | assertEq(cv.return, 42); |