The Tor Browser / file comparison
comparison: js/src/jit-test/tests/ion/bug784385.js
js/src/jit-test/tests/ion/bug784385.js
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:e173423423ae |
|---|---|
| 1 Object.defineProperty(Object.prototype, "a", { | |
| 2 set: function(a) { eval(""); return 123; } | |
| 3 }); | |
| 4 var obj = {}; | |
| 5 var obj2 = {x: 1}; | |
| 6 for (var i = 0; i < 100; i++) { | |
| 7 var res = (obj.a = obj2); | |
| 8 res.x = 0xbeef; | |
| 9 } |
