Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ |
michael@0 | 2 | /* This Source Code Form is subject to the terms of the Mozilla Public |
michael@0 | 3 | * License, v. 2.0. If a copy of the MPL was not distributed with this |
michael@0 | 4 | * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
michael@0 | 5 | |
michael@0 | 6 | //----------------------------------------------------------------------------- |
michael@0 | 7 | var BUGNUMBER = 290575; |
michael@0 | 8 | var summary = 'Do not crash calling function with more than 32768 arguments'; |
michael@0 | 9 | var actual = 'No Crash'; |
michael@0 | 10 | var expect = 'No Crash'; |
michael@0 | 11 | printBugNumber(BUGNUMBER); |
michael@0 | 12 | printStatus (summary); |
michael@0 | 13 | |
michael@0 | 14 | function crashMe(n) { |
michael@0 | 15 | var nasty, fn; |
michael@0 | 16 | |
michael@0 | 17 | nasty = []; |
michael@0 | 18 | while (n--) |
michael@0 | 19 | nasty.push("a"+n); // Function arguments |
michael@0 | 20 | nasty.push("void 0"); // Function body |
michael@0 | 21 | fn = Function.apply(null, nasty); |
michael@0 | 22 | fn.toString(); |
michael@0 | 23 | } |
michael@0 | 24 | |
michael@0 | 25 | printStatus('crashMe(0x8001)'); |
michael@0 | 26 | |
michael@0 | 27 | crashMe(0x8001); |
michael@0 | 28 | |
michael@0 | 29 | reportCompare(expect, actual, summary); |
michael@0 | 30 | |
michael@0 | 31 | function crashMe2(n) { |
michael@0 | 32 | var nasty = [], fn |
michael@0 | 33 | |
michael@0 | 34 | while (n--) nasty[n] = "a"+n |
michael@0 | 35 | fn = Function(nasty.join(), "void 0") |
michael@0 | 36 | fn.toString() |
michael@0 | 37 | } |
michael@0 | 38 | |
michael@0 | 39 | printStatus('crashMe2(0x10000)'); |
michael@0 | 40 | |
michael@0 | 41 | summary = 'Syntax Error Function to string when more than 65536 arguments'; |
michael@0 | 42 | expect = 'Error'; |
michael@0 | 43 | try |
michael@0 | 44 | { |
michael@0 | 45 | crashMe2(0x10000); |
michael@0 | 46 | actual = 'No Error'; |
michael@0 | 47 | reportCompare(expect, actual, summary); |
michael@0 | 48 | } |
michael@0 | 49 | catch(e) |
michael@0 | 50 | { |
michael@0 | 51 | actual = 'Error'; |
michael@0 | 52 | reportCompare(expect, actual, summary); |
michael@0 | 53 | expect = 'SyntaxError'; |
michael@0 | 54 | actual = e.name; |
michael@0 | 55 | reportCompare(expect, actual, summary); |
michael@0 | 56 | } |
michael@0 | 57 |