js/src/tests/js1_5/Regress/regress-366122.js

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
     2 /* This Source Code Form is subject to the terms of the Mozilla Public
     3  * License, v. 2.0. If a copy of the MPL was not distributed with this
     4  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
     6 //-----------------------------------------------------------------------------
     7 var BUGNUMBER = 366122;
     8 var summary = 'Compile large script';
     9 var actual = 'No Crash';
    10 var expect = 'No Crash';
    13 //-----------------------------------------------------------------------------
    14 test();
    15 //-----------------------------------------------------------------------------
    17 function test()
    18 {
    19   enterFunc ('test');
    20   printBugNumber(BUGNUMBER);
    21   printStatus (summary);
    23   function exploit() {
    24     var code = "", obj = {};
    25     for(var i = 0; i < 0x10000; i++) {
    26       if(i == 10242) {
    27         code += "void 0x10000050505050;\n";
    28       } else {
    29         code += "void 'x" + i + "';\n";
    30       }
    31     }
    32     code += "export undefined;\n";
    33     code += "void 125;\n";
    34     eval(code);
    35   }
    36   try
    37   {
    38     exploit();
    39   }
    40   catch(ex)
    41   {
    42   }
    43   reportCompare(expect, actual, summary);
    45   exitFunc ('test');
    46 }

mercurial