The Tor Browser: js/src/tests/js1_5/Regress/regress-481436.js@6474c204b198

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     2 /* This Source Code Form is subject to the terms of the Mozilla Public

     3  * License, v. 2.0. If a copy of the MPL was not distributed with this

     4  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     6 //-----------------------------------------------------------------------------

     7 var BUGNUMBER = 481436;

     8 var summary = 'TM: Do not crash @ FlushNativeStackFrame/JS_XDRNewMem';

     9 var actual = '';

    10 var expect = '';

    13 printBugNumber(BUGNUMBER);

    14 printStatus (summary);

    16 jit(true);

    18 function search(m, n) {

    19   if (m.name == n)

    20     return m;

    21   for (var i = 0; i < m.items.length; i++)

    22     if (m.items[i].type == 'M')

    23       search(m.items[i], n);

    24 }

    26 function crash() {

    27   for (var i = 0; i < 2; i++) {

    28     var root = {name: 'root', type: 'M', items: [{}]};

    29     search(root, 'x');

    30     root.items.push({name: 'tim', type: 'M', items: []});

    31     search(root, 'x');

    32     search(root, 'x');

    33   }

    34 }

    36 crash();

    38 jit(false);

    40 reportCompare(expect, actual, summary);

The Tor Browser / file revision