js/src/tests/js1_5/extensions/regress-341956-03.js@6474c204b198 (annotated)
js/src/tests/js1_5/extensions/regress-341956-03.js
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
| michael@0 | 1 | /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ |
| michael@0 | 2 | /* This Source Code Form is subject to the terms of the Mozilla Public |
| michael@0 | 3 | * License, v. 2.0. If a copy of the MPL was not distributed with this |
| michael@0 | 4 | * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
| michael@0 | 5 | |
| michael@0 | 6 | //----------------------------------------------------------------------------- |
| michael@0 | 7 | var BUGNUMBER = 341956; |
| michael@0 | 8 | var summary = 'GC Hazards in jsarray.c - reverse'; |
| michael@0 | 9 | var actual = 'No Crash'; |
| michael@0 | 10 | var expect = 'No Crash'; |
| michael@0 | 11 | |
| michael@0 | 12 | //----------------------------------------------------------------------------- |
| michael@0 | 13 | test(); |
| michael@0 | 14 | //----------------------------------------------------------------------------- |
| michael@0 | 15 | |
| michael@0 | 16 | function test() |
| michael@0 | 17 | { |
| michael@0 | 18 | enterFunc ('test'); |
| michael@0 | 19 | printBugNumber(BUGNUMBER); |
| michael@0 | 20 | printStatus (summary); |
| michael@0 | 21 | |
| michael@0 | 22 | var N = 0xFFFFFFFF; |
| michael@0 | 23 | var a = []; |
| michael@0 | 24 | a[N - 1] = 0; |
| michael@0 | 25 | |
| michael@0 | 26 | var expected = "GETTER RESULT"; |
| michael@0 | 27 | |
| michael@0 | 28 | a.__defineGetter__(N - 1, function() { |
| michael@0 | 29 | delete a[N - 1]; |
| michael@0 | 30 | var tmp = []; |
| michael@0 | 31 | tmp[N - 2] = 1; |
| michael@0 | 32 | |
| michael@0 | 33 | if (typeof gc == 'function') |
| michael@0 | 34 | gc(); |
| michael@0 | 35 | for (var i = 0; i != 50000; ++i) { |
| michael@0 | 36 | var tmp = 1 / 3; |
| michael@0 | 37 | tmp /= 10; |
| michael@0 | 38 | } |
| michael@0 | 39 | for (var i = 0; i != 1000; ++i) { |
| michael@0 | 40 | // Make string with 11 characters that would take |
| michael@0 | 41 | // (11 + 1) * 2 bytes or sizeof(JSAtom) so eventually |
| michael@0 | 42 | // malloc will ovewrite just freed atoms. |
| michael@0 | 43 | var tmp2 = Array(12).join(' '); |
| michael@0 | 44 | } |
| michael@0 | 45 | return expected; |
| michael@0 | 46 | }); |
| michael@0 | 47 | |
| michael@0 | 48 | // The following always-throw getter is to stop unshift from doing |
| michael@0 | 49 | // 2^32 iterations. |
| michael@0 | 50 | var toStop = "stringToStop"; |
| michael@0 | 51 | a[N - 3] = 0; |
| michael@0 | 52 | a.__defineGetter__(N - 3, function() { throw toStop; }); |
| michael@0 | 53 | |
| michael@0 | 54 | |
| michael@0 | 55 | var good = false; |
| michael@0 | 56 | |
| michael@0 | 57 | try { |
| michael@0 | 58 | a.reverse(); |
| michael@0 | 59 | } catch (e) { |
| michael@0 | 60 | if (e === toStop) |
| michael@0 | 61 | good = true; |
| michael@0 | 62 | } |
| michael@0 | 63 | |
| michael@0 | 64 | expect = true; |
| michael@0 | 65 | actual = good; |
| michael@0 | 66 | |
| michael@0 | 67 | reportCompare(expect, actual, summary); |
| michael@0 | 68 | |
| michael@0 | 69 | print('Done'); |
| michael@0 | 70 | |
| michael@0 | 71 | exitFunc ('test'); |
| michael@0 | 72 | } |
