The Tor Browser / file comparison
comparison: js/src/jit-test/tests/basic/bug639311.js
js/src/jit-test/tests/basic/bug639311.js
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:8fdb8c149b48 |
|---|---|
| 1 /* Avoid use-after-free while sweeping type objects. */ | |
| 2 | |
| 3 try { | |
| 4 Reflparse("") | |
| 5 } catch(e) {} | |
| 6 Reflect.parse("for(var a;a;j){if(a%2==0){c()}}") | |
| 7 try { | |
| 8 (function() { | |
| 9 for (a = 0;; j) { | |
| 10 gc() | |
| 11 } | |
| 12 })() | |
| 13 } catch(e) { | |
| 14 delete this.Math | |
| 15 } | |
| 16 gc() | |
| 17 Reflect.parse("let(x){}") | |
| 18 gc() |
