The Tor Browser: js/src/tests/js1_5/Function/regress-338001.js@6474c204b198

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 // |reftest| skip-if(Android) silentfail skip -- disabled pending bug 657444

     2 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     3 /* This Source Code Form is subject to the terms of the Mozilla Public

     4  * License, v. 2.0. If a copy of the MPL was not distributed with this

     5  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     7 //-----------------------------------------------------------------------------

     8 var BUGNUMBER = 338001;

     9 var summary = 'integer overflow in jsfun.c:Function';

    10 var actual = 'No Crash';

    11 var expect = /No Crash|InternalError: allocation size overflow/;

    13 printBugNumber(BUGNUMBER);

    14 printStatus (summary);

    16 expectExitCode(0);

    17 expectExitCode(5);

    19 var fe="f";

    21 try

    22 {

    23   for (i=0; i<25; i++)

    24     fe += fe;

    26   var fu=new Function(

    27     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    28     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    29     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    30     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    31     "done"

    32     );

    33 }

    34 catch(ex)

    35 {

    36   // handle changed 1.9 branch behavior. see bug 422348

    37   actual = ex + '';

    38 }

    40 print('Done: ' + actual);

    42 reportMatch(expect, actual, summary);

The Tor Browser / file revision