js/src/jit-test/tests/basic/bug641491.js

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:84b96f2840c5
1 function f1() {
2 }
3 function f2() {
4 }
5 function f3(o) {
6 f2 = Date.prototype;
7 }
8 var key = Object.getOwnPropertyNames(f1)[30];
9 if(key) {
10 f3 = f1[key];
11 }
12 gc();
13 gc();
14 try {
15 for(var i=0; i<10; i++) {
16 delete f2[1];
17 f3(function() {});
18 }
19 } catch (e) {}

mercurial