js/src/jit-test/tests/arrays/length-set-after-define-nonconfigurable.js

Tue, 06 Jan 2015 21:39:09 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 06 Jan 2015 21:39:09 +0100
branch
TOR_BUG_9701
changeset 8
97036ab72558
permissions
-rw-r--r--

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

michael@0 1 var arr = [1];
michael@0 2 Object.defineProperty(arr, 1, { value: undefined, configurable: false });
michael@0 3
michael@0 4 // no particular reason for 9 -- just enough to trigger property-cache code,
michael@0 5 // maybe start JITting a little
michael@0 6 for (var y = 0; y < 9; y++)
michael@0 7 arr.length = 1;

mercurial