The Tor Browser: js/src/tests/js1_5/Function/regress-338001.js@97036ab72558

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 // |reftest| skip-if(Android) silentfail skip -- disabled pending bug 657444

     2 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     3 /* This Source Code Form is subject to the terms of the Mozilla Public

     4  * License, v. 2.0. If a copy of the MPL was not distributed with this

     5  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     7 //-----------------------------------------------------------------------------

     8 var BUGNUMBER = 338001;

     9 var summary = 'integer overflow in jsfun.c:Function';

    10 var actual = 'No Crash';

    11 var expect = /No Crash|InternalError: allocation size overflow/;

    13 printBugNumber(BUGNUMBER);

    14 printStatus (summary);

    16 expectExitCode(0);

    17 expectExitCode(5);

    19 var fe="f";

    21 try

    22 {

    23   for (i=0; i<25; i++)

    24     fe += fe;

    26   var fu=new Function(

    27     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    28     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    29     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    30     fe, fe, fe, fe, fe, fe, fe, fe, fe, fe,

    31     "done"

    32     );

    33 }

    34 catch(ex)

    35 {

    36   // handle changed 1.9 branch behavior. see bug 422348

    37   actual = ex + '';

    38 }

    40 print('Done: ' + actual);

    42 reportMatch(expect, actual, summary);

The Tor Browser / file revision

js/src/tests/js1_5/Function/regress-338001.js@97036ab72558

js/src/tests/js1_5/Function/regress-338001.js