The Tor Browser / file comparison
comparison: js/src/jit-test/tests/auto-regress/bug666599.js
js/src/jit-test/tests/auto-regress/bug666599.js
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:5a59732f50da |
|---|---|
| 1 // |jit-test| error:TypeError | |
| 2 | |
| 3 // Binary: cache/js-dbg-32-0428dbdf3d58-linux | |
| 4 // Flags: | |
| 5 // | |
| 6 o1 = new Float32Array().buffer | |
| 7 o2 = ArrayBuffer.prototype | |
| 8 o3 = new Uint32Array().buffer | |
| 9 for (i = 0; i < 2; i++) { | |
| 10 for (var x in o2) { | |
| 11 o3.__defineGetter__("", function() {}) | |
| 12 } | |
| 13 o2.__defineGetter__("", function() {}) | |
| 14 o1[ | |
| 15 x] | |
| 16 o1.__proto__ = o3 | |
| 17 } |
