Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | |
michael@0 | 2 | function foo(x, y) { |
michael@0 | 3 | var res = 0; |
michael@0 | 4 | for (var i = 0; i < 10; i++) { |
michael@0 | 5 | res += x.f + y[i]; |
michael@0 | 6 | } |
michael@0 | 7 | return res; |
michael@0 | 8 | } |
michael@0 | 9 | |
michael@0 | 10 | var x = {f:0}; |
michael@0 | 11 | var y = Array(10); |
michael@0 | 12 | for (var i = 0; i < 10; i++) { |
michael@0 | 13 | if (i == 5) |
michael@0 | 14 | Object.defineProperty(Object.prototype, 5, {get: function() { x.f = 10; return 5}}); |
michael@0 | 15 | else |
michael@0 | 16 | y[i] = i; |
michael@0 | 17 | } |
michael@0 | 18 | |
michael@0 | 19 | assertEq(foo(x, y), 85); |