js/src/jit-test/tests/auto-regress/bug488015.js@6474c204b198
js/src/jit-test/tests/auto-regress/bug488015.js
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 // Binary: cache/js-dbg-64-e1257570fef8-linux
2 // Flags:
3 //
4 var a = [];
5 function addEventListener(e, f, g)
6 {
7 a.push(f);
8 }
9 function setTimeout(f, t)
10 {
11 a.push(f);
12 }
13 var b;
14 this.document = {};
15 function e(w) {
16 addEventListener("mousedown", d, true);
17 function d() {
18 var d;
19 w.setTimeout(function() {
20 b(d);
21 }, 0);
22 }
23 function b(d){
24 w.document; /* Crash Here!! */
25 }
26 }
27 e(this);
28 a[0]();
29 a[1]();
