The Tor Browser / file revision

• file
• revisions
• annotate
• diff
• comparison
• raw

js/src/jit-test/tests/arrays/length-set-after-define-nonconfigurable.js@6474c204b198

js/src/jit-test/tests/arrays/length-set-after-define-nonconfigurable.js

Wed, 31 Dec 2014 06:09:35 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Wed, 31 Dec 2014 06:09:35 +0100

changeset 0

6474c204b198

permissions

-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

 var arr = [1];

 Object.defineProperty(arr, 1, { value: undefined, configurable: false });

 // no particular reason for 9 -- just enough to trigger property-cache code,

 // maybe start JITting a little

 for (var y = 0; y < 9; y++)

   arr.length = 1;