Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | // PIC on CALLPROP invoking getter hook. |
michael@0 | 2 | |
michael@0 | 3 | function foo(arr) { |
michael@0 | 4 | for (var i = 0; i < 100; i++) |
michael@0 | 5 | arr[i].caller(false); |
michael@0 | 6 | } |
michael@0 | 7 | arr = Object.create(Object.prototype); |
michael@0 | 8 | first = Object.create({}); |
michael@0 | 9 | first.caller = bar; |
michael@0 | 10 | second = Object.create({}); |
michael@0 | 11 | second.caller = bar; |
michael@0 | 12 | for (var i = 0; i < 100; ) |
michael@0 | 13 | arr[i++] = foo; |
michael@0 | 14 | foo.caller; |
michael@0 | 15 | function bar(x) { |
michael@0 | 16 | if (x) |
michael@0 | 17 | foo(arr); |
michael@0 | 18 | } |
michael@0 | 19 | bar(true); |