The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/ion/bug930993.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,6 @@
     1.4 +x = {};
     1.5 +y = x;
     1.6 +x.toString = function() {
     1.7 +    new Int8Array(ArrayBuffer)[0] = new Float32Array(ArrayBuffer)[0];
     1.8 +}
     1.9 +print(x << y);