The Tor Browser / file comparison
comparison: js/src/jit-test/tests/auto-regress/bug737737.js
js/src/jit-test/tests/auto-regress/bug737737.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:65c61d5ce0cc |
|---|---|
| 1 // Binary: cache/js-dbg-32-e96d5b1f47b8-linux | |
| 2 // Flags: --ion-eager | |
| 3 // | |
| 4 function b(z) { | |
| 5 switch (z) { | |
| 6 default: | |
| 7 primarySandbox = newGlobal() | |
| 8 } | |
| 9 return function(f, code) { | |
| 10 try { | |
| 11 evalcx(code, primarySandbox) | |
| 12 } catch (e) {} | |
| 13 } | |
| 14 } | |
| 15 function a(code) { | |
| 16 gc(); | |
| 17 f = Function(code) | |
| 18 c(f, code) | |
| 19 } | |
| 20 c = b() | |
| 21 a("\ | |
| 22 f2 = (function() {\ | |
| 23 a0 + o2.m;\ | |
| 24 a2.shift()\ | |
| 25 });\ | |
| 26 a2 = new Array;\ | |
| 27 Object.defineProperty(a2, 0, {\ | |
| 28 get: f2\ | |
| 29 });\ | |
| 30 o2 = {};\ | |
| 31 a0 = [];\ | |
| 32 a2.shift();\ | |
| 33 var x;\ | |
| 34 ") | |
| 35 a("a0 = x") | |
| 36 a("a2.shift()") |
