The Tor Browser: js/src/tests/js1_5/Function/regress-364023.js@6474c204b198

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     2 /* This Source Code Form is subject to the terms of the Mozilla Public

     3  * License, v. 2.0. If a copy of the MPL was not distributed with this

     4  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     6 //-----------------------------------------------------------------------------

     7 var BUGNUMBER = 364023;

     8 var summary = 'Do not crash in JS_GetPrivate';

     9 var actual = 'No Crash';

    10 var expect = 'No Crash';

    13 //-----------------------------------------------------------------------------

    14 test();

    15 //-----------------------------------------------------------------------------

    17 function test()

    18 {

    19   enterFunc ('test');

    20   printBugNumber(BUGNUMBER);

    21   printStatus (summary);

    23   function exploit() {

    24     var code = "";

    25     for(var i = 0; i < 0x10000; i++) {

    26       if(i == 125) {

    27         code += "void 0x10000050505050;\n";

    28       } else {

    29         code += "void " + (0x10000000000000 + i) + ";\n";

    30       }

    31     }

    32     code += "function foo() {}\n";

    33     eval(code);

    34   }

    35   exploit();

    37   reportCompare(expect, actual, summary);

    39   exitFunc ('test');

    40 }

The Tor Browser / file revision