The Tor Browser: js/src/tests/js1_8_1/regress/regress-452498-139.js@44a2da4a2ab2

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

     1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     2 /* This Source Code Form is subject to the terms of the Mozilla Public

     3  * License, v. 2.0. If a copy of the MPL was not distributed with this

     4  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     6 //-----------------------------------------------------------------------------

     7 var BUGNUMBER = 452498;

     8 var summary = 'TM: upvar2 regression tests';

     9 var actual = '';

    10 var expect = '';

    13 //-----------------------------------------------------------------------------

    14 test();

    15 //-----------------------------------------------------------------------------

    17 function test()

    18 {

    19   enterFunc ('test');

    20   printBugNumber(BUGNUMBER);

    21   printStatus (summary);

    23 // ------- Comment #139 From Gary Kwong [:nth10sd]

    25 // Does not require -j:

    26 // ===

    27   try

    28   {

    29     (function(){var x = x (x() for each (x in []))})();

    30   }

    31   catch(ex)

    32   {

    33   }

    34 // Assertion failure: (fun->u.i.script)->upvarsOffset != 0, at ../jsfun.cpp:1541

    35 // Opt crash near null [@ js_NewFlatClosure]

    36 // ===

    38   reportCompare(expect, actual, summary);

    40   exitFunc ('test');

    41 }

The Tor Browser / file revision