The Tor Browser / file comparison
comparison: js/src/jit-test/tests/jaeger/bug617558.js
js/src/jit-test/tests/jaeger/bug617558.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:4926da4f4080 |
|---|---|
| 1 | |
| 2 Array.prototype.__proto__ = Function.prototype; | |
| 3 var x = [1,2,3]; | |
| 4 x[0]; | |
| 5 | |
| 6 [].__proto__.foo = true; | |
| 7 eval("[]"); |
