js/src/jit-test/tests/ion/bug800179.js

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 // |jit-test| error: TypeError
     3 try {
     4     x = []
     5     y = function() {}
     6     t = Uint8ClampedArray
     7     Object.defineProperty(x, 1, {
     8         get: (function() {
     9             for (v of t) {}
    10         })
    11     })
    12     Object.defineProperty(x, 8, {
    13         configurable: t
    14     }).reverse()
    15 } catch (e) {}
    16 Object.defineProperty([], 1, {
    17     configurable: true,
    18     get: (function() {
    19         for (j = 0; j < 50; ++j) {
    20             y()
    21         }
    22     })
    23 }).pop()
    24 x.map(y)

mercurial