Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | // Eval-in-frame of optimized frames to break out of an infinite loop. |
michael@0 | 2 | |
michael@0 | 3 | load(libdir + "jitopts.js"); |
michael@0 | 4 | |
michael@0 | 5 | if (!jitTogglesMatch(Opts_IonEagerNoParallelCompilation)) |
michael@0 | 6 | quit(0); |
michael@0 | 7 | |
michael@0 | 8 | withJitOptions(Opts_IonEagerNoParallelCompilation, function () { |
michael@0 | 9 | var g = newGlobal(); |
michael@0 | 10 | var dbg = new Debugger; |
michael@0 | 11 | |
michael@0 | 12 | g.eval("" + function f(d) { g(d); }); |
michael@0 | 13 | g.eval("" + function g(d) { h(d); }); |
michael@0 | 14 | g.eval("" + function h(d) { |
michael@0 | 15 | var i = 0; |
michael@0 | 16 | while (d) |
michael@0 | 17 | interruptIf(d && i++ == 4000); |
michael@0 | 18 | }); |
michael@0 | 19 | |
michael@0 | 20 | setInterruptCallback(function () { |
michael@0 | 21 | dbg.addDebuggee(g); |
michael@0 | 22 | var frame = dbg.getNewestFrame(); |
michael@0 | 23 | if (frame.callee.name != "h" || frame.implementation != "ion") |
michael@0 | 24 | return true; |
michael@0 | 25 | frame.eval("d = false;"); |
michael@0 | 26 | return true; |
michael@0 | 27 | }); |
michael@0 | 28 | |
michael@0 | 29 | g.eval("(" + function () { |
michael@0 | 30 | for (i = 0; i < 5; i++) |
michael@0 | 31 | f(false); |
michael@0 | 32 | f(true); |
michael@0 | 33 | } + ")();"); |
michael@0 | 34 | }); |