The Tor Browser / file revision

• file
• revisions
• annotate
• diff
• comparison
• raw

js/src/jit-test/tests/basic/testGlobalShapeChangeAfterDeepBail.js@6474c204b198

js/src/jit-test/tests/basic/testGlobalShapeChangeAfterDeepBail.js

Wed, 31 Dec 2014 06:09:35 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Wed, 31 Dec 2014 06:09:35 +0100

changeset 0

6474c204b198

permissions

-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

 // Complicated whitebox test for bug 487845.

 function testGlobalShapeChangeAfterDeepBail() {

     function f(name) {

         this[name] = 1;  // may change global shape

         for (var i = 0; i < 4; i++)

             ; // MonitorLoopEdge eventually triggers assertion

     }

     // When i==3, deep-bail, then change global shape enough times to exhaust

     // the array of GlobalStates.

     var arr = [[], [], [], ["bug0", "bug1", "bug2", "bug3", "bug4"]];

     for (var i = 0; i < arr.length; i++)

         arr[i].forEach(f);

 }

 testGlobalShapeChangeAfterDeepBail();