The Tor Browser / file comparison
comparison: js/src/tests/js1_5/Regress/regress-481436.js
js/src/tests/js1_5/Regress/regress-481436.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:324e925a6f66 |
|---|---|
| 1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ | |
| 2 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 3 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 5 | |
| 6 //----------------------------------------------------------------------------- | |
| 7 var BUGNUMBER = 481436; | |
| 8 var summary = 'TM: Do not crash @ FlushNativeStackFrame/JS_XDRNewMem'; | |
| 9 var actual = ''; | |
| 10 var expect = ''; | |
| 11 | |
| 12 | |
| 13 printBugNumber(BUGNUMBER); | |
| 14 printStatus (summary); | |
| 15 | |
| 16 jit(true); | |
| 17 | |
| 18 function search(m, n) { | |
| 19 if (m.name == n) | |
| 20 return m; | |
| 21 for (var i = 0; i < m.items.length; i++) | |
| 22 if (m.items[i].type == 'M') | |
| 23 search(m.items[i], n); | |
| 24 } | |
| 25 | |
| 26 function crash() { | |
| 27 for (var i = 0; i < 2; i++) { | |
| 28 var root = {name: 'root', type: 'M', items: [{}]}; | |
| 29 search(root, 'x'); | |
| 30 root.items.push({name: 'tim', type: 'M', items: []}); | |
| 31 search(root, 'x'); | |
| 32 search(root, 'x'); | |
| 33 } | |
| 34 } | |
| 35 | |
| 36 crash(); | |
| 37 | |
| 38 jit(false); | |
| 39 | |
| 40 reportCompare(expect, actual, summary); |
