The Tor Browser / file comparison
comparison: js/src/jit-test/tests/auto-regress/bug488015.js
js/src/jit-test/tests/auto-regress/bug488015.js
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:8335ddaa0170 |
|---|---|
| 1 // Binary: cache/js-dbg-64-e1257570fef8-linux | |
| 2 // Flags: | |
| 3 // | |
| 4 var a = []; | |
| 5 function addEventListener(e, f, g) | |
| 6 { | |
| 7 a.push(f); | |
| 8 } | |
| 9 function setTimeout(f, t) | |
| 10 { | |
| 11 a.push(f); | |
| 12 } | |
| 13 var b; | |
| 14 this.document = {}; | |
| 15 function e(w) { | |
| 16 addEventListener("mousedown", d, true); | |
| 17 function d() { | |
| 18 var d; | |
| 19 w.setTimeout(function() { | |
| 20 b(d); | |
| 21 }, 0); | |
| 22 } | |
| 23 function b(d){ | |
| 24 w.document; /* Crash Here!! */ | |
| 25 } | |
| 26 } | |
| 27 e(this); | |
| 28 a[0](); | |
| 29 a[1](); |
