The Tor Browser: js/src/tests/js1_5/Function/regress-338001.js@44a2da4a2ab2

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

     1 // |reftest| skip-if(Android) silentfail skip -- disabled pending bug 657444

     2 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     3 /* This Source Code Form is subject to the terms of the Mozilla Public

     4  * License, v. 2.0. If a copy of the MPL was not distributed with this

     5  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     7 //-----------------------------------------------------------------------------

     8 var BUGNUMBER = 338001;

     9 var summary = 'integer overflow in jsfun.c:Function';

    10 var actual = 'No Crash';

    11 var expect = /No Crash|InternalError: allocation size overflow/;

    13 printBugNumber(BUGNUMBER);

    14 printStatus (summary);

    16 expectExitCode(0);

    17 expectExitCode(5);

    19 var fe="f";

    21 try

    22 {

    23   for (i=0; i<25; i++)

    24     fe += fe;

    26   var fu=new Function(

    27     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    28     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    29     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    30     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    31     "done"

    32     );

    33 }

    34 catch(ex)

    35 {

    36   // handle changed 1.9 branch behavior. see bug 422348

    37   actual = ex + '';

    38 }

    40 print('Done: ' + actual);

    42 reportMatch(expect, actual, summary);

The Tor Browser / file revision