The Tor Browser / file comparison
comparison: js/src/tests/js1_5/extensions/regress-336410-1.js
js/src/tests/js1_5/extensions/regress-336410-1.js
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:69e9ba7a4fd6 |
|---|---|
| 1 // |reftest| skip-if(!xulRuntime.shell||Android) slow -- can fail silently due to out of memory | |
| 2 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ | |
| 3 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 4 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 5 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 6 | |
| 7 //----------------------------------------------------------------------------- | |
| 8 var BUGNUMBER = 336410; | |
| 9 var summary = 'Integer overflow in array_toSource'; | |
| 10 var actual = 'No Crash'; | |
| 11 var expect = 'No Crash'; | |
| 12 | |
| 13 printBugNumber(BUGNUMBER); | |
| 14 printStatus (summary); | |
| 15 | |
| 16 expectExitCode(0); | |
| 17 expectExitCode(5); | |
| 18 | |
| 19 function createString(n) | |
| 20 { | |
| 21 var l = n*1024*1024; | |
| 22 var r = 'r'; | |
| 23 | |
| 24 while (r.length < l) | |
| 25 { | |
| 26 r = r + r; | |
| 27 } | |
| 28 return r; | |
| 29 } | |
| 30 | |
| 31 try | |
| 32 { | |
| 33 var n = 64; | |
| 34 printStatus('Creating ' + n + 'M length string'); | |
| 35 var r = createString(n); | |
| 36 printStatus('Done. length = ' + r.length); | |
| 37 printStatus('Creating array'); | |
| 38 var o=[r, r, r, r, r, r, r, r, r]; | |
| 39 printStatus('object.toSource()'); | |
| 40 var rr = o.toSource(); | |
| 41 printStatus('Done.'); | |
| 42 } | |
| 43 catch(ex) | |
| 44 { | |
| 45 expect = '\(InternalError: allocation size overflow|out of memory\)'; | |
| 46 actual = ex + ''; | |
| 47 print(actual); | |
| 48 } | |
| 49 | |
| 50 reportCompare(expect, actual, summary); |
