The Tor Browser: content/media/test/crashtests/875144.html@44a2da4a2ab2

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

     1 <script>

     2 Logger = {}

     3 Logger.error = function(e) {}

     4 Logger.comment = function(e) {}

     6 try { o0 = document.createElement('audio'); } catch(e) { Logger.error(Logger.comment(e)); }

     7 try { (document.body || document.documentElement).appendChild(o0); } catch(e) { Logger.error(Logger.comment(e)); }

     8 try { o1 = new AudioContext(); } catch(e) { Logger.error(Logger.comment(e)); }

     9 try { o2 = o1.createGain(); } catch(e) { Logger.error(Logger.comment(e)); }

    10 try { o3 = o1.createBufferSource(); } catch(e) { Logger.error(Logger.comment(e)); }

    11 try { o3.buffer = function() { o4 = o1.createBuffer(1, 3, 52970);

    12 o5 = o4.getChannelData(0);

    13 for(var i=0; i<3; ++i) {

    14 o5[i] = Math.sin(i * 63);

    15 }

    16 return o4;

    17 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    18 try { o3.buffer = function() { o6 = o1.createBuffer(1, 15, 41218);

    19 o7 = o6.getChannelData(0);

    20 for(var i=0; i<15; ++i) {

    21 o7[i] = Math.sin(i * 0);

    22 }

    23 return o6;

    24 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    25 try { o3.buffer = function() { o8 = o1.createBuffer(1, 0, 49074);

    26 o9 = o8.getChannelData(0);

    27 for(var i=0; i<0; ++i) {

    28 o9[i] = Math.sin(i * 0);

    29 }

    30 return o8;

    31 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    32 try { o3.buffer = function() { o10 = o1.createBuffer(1, 31, 86527);

    33 o11 = o10.getChannelData(0);

    34 for(var i=0; i<31; ++i) {

    35 o11[i] = Math.sin(i * 127);

    36 }

    37 return o10;

    38 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    39 try { o3.stop(-1) } catch(e) { Logger.error(Logger.comment(e)); }

    40 /* [Exception... "An attempt was made to use an object that is not, or is no longer, usable"  code: "11" nsresult: "0x8053000b (InvalidStateError)"  location: "file:///Users/cdiehl/dev/projects/peach/Peach/Utilities/JS/undefined.js Line: 602"] */

    41 try { o3.channelCountMode = 'explicit'; } catch(e) { Logger.error(Logger.comment(e)); }

    42 try { o12 = o1.createBiquadFilter(); } catch(e) { Logger.error(Logger.comment(e)); }

    43 try { o3.buffer = function() { o13 = o1.createBuffer(1, 63, 28347);

    44 o14 = o13.getChannelData(0);

    45 for(var i=0; i<63; ++i) {

    46 o14[i] = Math.sin(i * 15);

    47 }

    48 return o13;

    49 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    50 try { o12.channelCount = 1; } catch(e) { Logger.error(Logger.comment(e)); }

    51 try { o12.connect(GainNode, 65536, 0) } catch(e) { Logger.error(Logger.comment(e)); }

    52 /* TypeError: Value does not implement interface AudioNode. */

    53 try { o3.buffer = function() { o15 = o1.createBuffer(1, 1, 72540);

    54 o16 = o15.getChannelData(0);

    55 for(var i=0; i<1; ++i) {

    56 o16[i] = Math.sin(i * 7);

    57 }

    58 return o15;

    59 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    60 try { o12.getFrequencyResponse(new Float32Array(7), new Float32Array(127), new Float32Array(7)) } catch(e) { Logger.error(Logger.comment(e)); }

    61 try { o12.getFrequencyResponse(new Float32Array(15), new Float32Array(127), new Float32Array(7)) } catch(e) { Logger.error(Logger.comment(e)); }

    62 try { o17 = document.createElement('audio'); } catch(e) { Logger.error(Logger.comment(e)); }

    63 try { (document.body || document.documentElement).appendChild(o0); } catch(e) { Logger.error(Logger.comment(e)); }

    64 try { o3.buffer = function() { o18 = o1.createBuffer(1, 7, 91261);

    65 o19 = o18.getChannelData(0);

    66 for(var i=0; i<7; ++i) {

    67 o19[i] = Math.sin(i * 7);

    68 }

    69 return o18;

    70 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    71 try { o12.getFrequencyResponse(new Float32Array(31), new Float32Array(31), new Float32Array(127)) } catch(e) { Logger.error(Logger.comment(e)); }

    72 try { o20 = o1.createChannelSplitter(1, 2, 4, 16, 32); } catch(e) { Logger.error(Logger.comment(e)); }

    73 try { o12.channelCountMode = 'explicit'; } catch(e) { Logger.error(Logger.comment(e)); }

    74 try { o3.buffer = function() { o21 = o1.createBuffer(1, 0, 14451);

    75 o22 = o21.getChannelData(0);

    76 for(var i=0; i<0; ++i) {

    77 o22[i] = Math.sin(i * 63);

    78 }

    79 return o21;

    80 }(); } catch(e) { Logger.error(Logger.comment(e)); }

    81 </script>

The Tor Browser / file revision

content/media/test/crashtests/875144.html@44a2da4a2ab2

content/media/test/crashtests/875144.html