The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/tests/js1_5/extensions/regress-336410-1.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,50 @@
     1.4 +// |reftest| skip-if(!xulRuntime.shell||Android) slow -- can fail silently due to out of memory
     1.5 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
     1.6 +/* This Source Code Form is subject to the terms of the Mozilla Public
     1.7 + * License, v. 2.0. If a copy of the MPL was not distributed with this
     1.8 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
     1.9 +
    1.10 +//-----------------------------------------------------------------------------
    1.11 +var BUGNUMBER = 336410;
    1.12 +var summary = 'Integer overflow in array_toSource';
    1.13 +var actual = 'No Crash';
    1.14 +var expect = 'No Crash';
    1.15 +
    1.16 +printBugNumber(BUGNUMBER);
    1.17 +printStatus (summary);
    1.18 +
    1.19 +expectExitCode(0);
    1.20 +expectExitCode(5);
    1.21 +
    1.22 +function createString(n)
    1.23 +{
    1.24 +  var l = n*1024*1024;
    1.25 +  var r = 'r';
    1.26 +
    1.27 +  while (r.length < l)
    1.28 +  {
    1.29 +    r = r + r;
    1.30 +  }
    1.31 +  return r;
    1.32 +}
    1.33 +
    1.34 +try
    1.35 +{
    1.36 +  var n = 64;
    1.37 +  printStatus('Creating ' + n + 'M length string');
    1.38 +  var r = createString(n);
    1.39 +  printStatus('Done. length = ' + r.length);
    1.40 +  printStatus('Creating array');
    1.41 +  var o=[r, r, r, r, r, r, r, r, r];
    1.42 +  printStatus('object.toSource()');
    1.43 +  var rr = o.toSource();
    1.44 +  printStatus('Done.');
    1.45 +}
    1.46 +catch(ex)
    1.47 +{
    1.48 +  expect = '\(InternalError: allocation size overflow|out of memory\)';
    1.49 +  actual = ex + '';
    1.50 +  print(actual);
    1.51 +}
    1.52 +
    1.53 +reportCompare(expect, actual, summary);