1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/js/src/tests/js1_5/Regress/regress-290575.js Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,57 @@ 1.4 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ 1.5 +/* This Source Code Form is subject to the terms of the Mozilla Public 1.6 + * License, v. 2.0. If a copy of the MPL was not distributed with this 1.7 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ 1.8 + 1.9 +//----------------------------------------------------------------------------- 1.10 +var BUGNUMBER = 290575; 1.11 +var summary = 'Do not crash calling function with more than 32768 arguments'; 1.12 +var actual = 'No Crash'; 1.13 +var expect = 'No Crash'; 1.14 +printBugNumber(BUGNUMBER); 1.15 +printStatus (summary); 1.16 + 1.17 +function crashMe(n) { 1.18 + var nasty, fn; 1.19 + 1.20 + nasty = []; 1.21 + while (n--) 1.22 + nasty.push("a"+n); // Function arguments 1.23 + nasty.push("void 0"); // Function body 1.24 + fn = Function.apply(null, nasty); 1.25 + fn.toString(); 1.26 +} 1.27 + 1.28 +printStatus('crashMe(0x8001)'); 1.29 + 1.30 +crashMe(0x8001); 1.31 + 1.32 +reportCompare(expect, actual, summary); 1.33 + 1.34 +function crashMe2(n) { 1.35 + var nasty = [], fn 1.36 + 1.37 + while (n--) nasty[n] = "a"+n 1.38 + fn = Function(nasty.join(), "void 0") 1.39 + fn.toString() 1.40 + } 1.41 + 1.42 +printStatus('crashMe2(0x10000)'); 1.43 + 1.44 +summary = 'Syntax Error Function to string when more than 65536 arguments'; 1.45 +expect = 'Error'; 1.46 +try 1.47 +{ 1.48 + crashMe2(0x10000); 1.49 + actual = 'No Error'; 1.50 + reportCompare(expect, actual, summary); 1.51 +} 1.52 +catch(e) 1.53 +{ 1.54 + actual = 'Error'; 1.55 + reportCompare(expect, actual, summary); 1.56 + expect = 'SyntaxError'; 1.57 + actual = e.name; 1.58 + reportCompare(expect, actual, summary); 1.59 +} 1.60 +