The Tor Browser: js/src/tests/js1_5/Regress/regress-366122.js@97036ab72558

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

     2 /* This Source Code Form is subject to the terms of the Mozilla Public

     3  * License, v. 2.0. If a copy of the MPL was not distributed with this

     4  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     6 //-----------------------------------------------------------------------------

     7 var BUGNUMBER = 366122;

     8 var summary = 'Compile large script';

     9 var actual = 'No Crash';

    10 var expect = 'No Crash';

    13 //-----------------------------------------------------------------------------

    14 test();

    15 //-----------------------------------------------------------------------------

    17 function test()

    18 {

    19   enterFunc ('test');

    20   printBugNumber(BUGNUMBER);

    21   printStatus (summary);

    23   function exploit() {

    24     var code = "", obj = {};

    25     for(var i = 0; i < 0x10000; i++) {

    26       if(i == 10242) {

    27         code += "void 0x10000050505050;\n";

    28       } else {

    29         code += "void 'x" + i + "';\n";

    30       }

    31     }

    32     code += "export undefined;\n";

    33     code += "void 125;\n";

    34     eval(code);

    35   }

    36   try

    37   {

    38     exploit();

    39   }

    40   catch(ex)

    41   {

    42   }

    43   reportCompare(expect, actual, summary);

    45   exitFunc ('test');

    46 }

The Tor Browser / file revision

js/src/tests/js1_5/Regress/regress-366122.js@97036ab72558

js/src/tests/js1_5/Regress/regress-366122.js