Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1 revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1
2 var arr = new Int8Array(100);
3 function f(a) {
4 for(var i=0; i<30; i++) {
5 x = a[85.3];
6 }
7 }
8 f(arr);
9
10 var buf = serialize(new Date(NaN));
11 var n = -(8.64e15 + 1);
12 var nbuf = serialize(n);
13 for (var j = 0; j < 8; j++)
14 buf[j + (0.00000000123)] = nbuf[j];