Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | this.name = "outer"; |
michael@0 | 2 | |
michael@0 | 3 | var sb = evalcx(''); |
michael@0 | 4 | sb.name = "inner"; |
michael@0 | 5 | sb.parent = this; |
michael@0 | 6 | |
michael@0 | 7 | var res = 0; |
michael@0 | 8 | |
michael@0 | 9 | function f() { |
michael@0 | 10 | assertEq(this.name, "outer"); |
michael@0 | 11 | res++; |
michael@0 | 12 | } |
michael@0 | 13 | |
michael@0 | 14 | // ff is a property of the inner global object. Generate a CALLNAME IC, then |
michael@0 | 15 | // change ff to a function on the outer global. It should get the inner this |
michael@0 | 16 | // value. |
michael@0 | 17 | evalcx('this.ff = function() {};' + |
michael@0 | 18 | '(function() { ' + |
michael@0 | 19 | 'eval("");' + |
michael@0 | 20 | 'for(var i=0; i<10; i++) {' + |
michael@0 | 21 | 'ff();' + |
michael@0 | 22 | 'if (i == 5) ff = parent.f;' + |
michael@0 | 23 | '}' + |
michael@0 | 24 | '})()', sb); |
michael@0 | 25 | assertEq(res, 4); |