The Tor Browser / file comparison
comparison: js/src/tests/js1_5/extensions/regress-319683.js
js/src/tests/js1_5/extensions/regress-319683.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:63d806715f1f |
|---|---|
| 1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ | |
| 2 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 3 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 4 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 5 | |
| 6 //----------------------------------------------------------------------------- | |
| 7 var BUGNUMBER = 319683; | |
| 8 var summary = 'Do not crash in call_enumerate'; | |
| 9 var actual = 'No Crash'; | |
| 10 var expect = 'No Crash'; | |
| 11 printBugNumber(BUGNUMBER); | |
| 12 printStatus (summary); | |
| 13 | |
| 14 function crash(){ | |
| 15 function f(){ | |
| 16 var x; | |
| 17 function g(){ | |
| 18 x=1; //reference anything here or will not crash. | |
| 19 } | |
| 20 } | |
| 21 | |
| 22 //apply an object to the __proto__ attribute | |
| 23 f.__proto__={}; | |
| 24 | |
| 25 //the following call will cause crash | |
| 26 f(); | |
| 27 } | |
| 28 | |
| 29 crash(); | |
| 30 | |
| 31 reportCompare(expect, actual, summary); |
