The Tor Browser / file comparison
comparison: js/src/jit-test/tests/auto-regress/bug658803.js
js/src/jit-test/tests/auto-regress/bug658803.js
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:a22ca816d097 |
|---|---|
| 1 // Binary: cache/js-dbg-32-33f1ad45ccb8-linux | |
| 2 // Flags: -m -n | |
| 3 // | |
| 4 function f() { | |
| 5 var N = 624; | |
| 6 this.init_genrand = function(s) { | |
| 7 for (z = 1; z < N; z++) {} | |
| 8 }; | |
| 9 }(function() { | |
| 10 new f; | |
| 11 }()); | |
| 12 function g(o) { | |
| 13 var props = Object.getOwnPropertyNames(o); | |
| 14 var prop = props[props.length - 1] + "p" | |
| 15 o[prop] = Number.prototype.__proto__; | |
| 16 } | |
| 17 g(Number.prototype.__proto__); |
