js/src/tests/js1_8/extensions/regress-415721.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/tests/js1_8/extensions/regress-415721.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,44 @@
     1.4 +// |reftest| skip
     1.5 +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
     1.6 +/*
     1.7 + * Any copyright is dedicated to the Public Domain.
     1.8 + * http://creativecommons.org/licenses/publicdomain/
     1.9 + * Contributor: Jason Orendorff
    1.10 + */
    1.11 +
    1.12 +//-----------------------------------------------------------------------------
    1.13 +var BUGNUMBER = 415721;
    1.14 +var summary = 'jsatom.c double hashing re-validation logic is unsound';
    1.15 +
    1.16 +printStatus (summary);
    1.17 +
    1.18 +var VARS = 10000;
    1.19 +var TRIES = 100;
    1.20 +
    1.21 +function atomizeStressTest() {
    1.22 +  var fn = "function f() {var ";
    1.23 +  for (var i = 0; i < VARS; i++)
    1.24 +    fn += '_f' + i + ', ';
    1.25 +  fn += 'q;}';
    1.26 +
    1.27 +  function e() { eval(fn); }
    1.28 +
    1.29 +  for (var i = 0; i < TRIES; i++) {
    1.30 +    scatter([e,e]);
    1.31 +    gc();
    1.32 +  }
    1.33 +}
    1.34 +
    1.35 +var expect;
    1.36 +var actual;
    1.37 +
    1.38 +expect = actual = 'No crash';
    1.39 +if (typeof scatter == 'undefined' || typeof gc == 'undefined') {
    1.40 +  print('Test skipped. scatter or gc not defined.');
    1.41 +  expect = actual = 'Test skipped.';
    1.42 +} else {
    1.43 +  atomizeStressTest();
    1.44 +}
    1.45 +
    1.46 +reportCompare(expect, actual, summary);
    1.47 +

mercurial