The Tor Browser / file comparison
comparison: js/src/jit-test/tests/debug/Object-deleteProperty-error-01.js
js/src/jit-test/tests/debug/Object-deleteProperty-error-01.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:68e852cb5f68 |
|---|---|
| 1 // Don't crash when a scripted proxy handler throws Error.prototype. | |
| 2 | |
| 3 var g = newGlobal(); | |
| 4 var dbg = Debugger(g); | |
| 5 dbg.onDebuggerStatement = function (frame) { | |
| 6 try { | |
| 7 frame.arguments[0].deleteProperty("x"); | |
| 8 } catch (exc) { | |
| 9 return; | |
| 10 } | |
| 11 throw new Error("deleteProperty should throw"); | |
| 12 }; | |
| 13 | |
| 14 g.eval("function h(obj) { debugger; }"); | |
| 15 g.eval("h(Proxy.create({delete: function () { throw Error.prototype; }}));"); | |
| 16 |
