js/src/jit-test/tests/auto-regress/bug658803.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/auto-regress/bug658803.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,17 @@
     1.4 +// Binary: cache/js-dbg-32-33f1ad45ccb8-linux
     1.5 +// Flags: -m -n
     1.6 +//
     1.7 +function f() {
     1.8 +  var N = 624;
     1.9 +  this.init_genrand = function(s) {
    1.10 +    for (z = 1; z < N; z++) {}
    1.11 +  };
    1.12 +}(function() {
    1.13 +  new f;
    1.14 +}());
    1.15 +function g(o) {
    1.16 +  var props = Object.getOwnPropertyNames(o);
    1.17 +  var prop = props[props.length - 1] + "p"
    1.18 +  o[prop] = Number.prototype.__proto__;
    1.19 +}
    1.20 +g(Number.prototype.__proto__);

mercurial