js/src/jit-test/tests/arrays/setelem-one-past-nonwritable-length.js

Thu, 15 Jan 2015 15:59:08 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 15:59:08 +0100
branch
TOR_BUG_9701
changeset 10
ac0c01689b40
permissions
-rw-r--r--

Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

michael@0 1 function f(arr, i, v)
michael@0 2 {
michael@0 3 arr[i] = v;
michael@0 4 }
michael@0 5
michael@0 6 function test()
michael@0 7 {
michael@0 8 // Use a much-greater capacity than the eventual non-writable length.
michael@0 9 var a = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15];
michael@0 10 Object.defineProperty(a, "length", { writable: false, value: 6 });
michael@0 11
michael@0 12 for (var i = 0; i < 100; i++)
michael@0 13 f(a, a.length, i);
michael@0 14
michael@0 15 assertEq(a.hasOwnProperty(6), false);
michael@0 16 assertEq(a[6], undefined);
michael@0 17 assertEq(a.length, 6);
michael@0 18 }
michael@0 19
michael@0 20 test();

mercurial