js/src/jit-test/tests/basic/testGlobalShapeChangeAfterDeepBail.js

Thu, 15 Jan 2015 15:59:08 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 15:59:08 +0100
branch
TOR_BUG_9701
changeset 10
ac0c01689b40
permissions
-rw-r--r--

Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 // Complicated whitebox test for bug 487845.
     2 function testGlobalShapeChangeAfterDeepBail() {
     3     function f(name) {
     4         this[name] = 1;  // may change global shape
     5         for (var i = 0; i < 4; i++)
     6             ; // MonitorLoopEdge eventually triggers assertion
     7     }
     9     // When i==3, deep-bail, then change global shape enough times to exhaust
    10     // the array of GlobalStates.
    11     var arr = [[], [], [], ["bug0", "bug1", "bug2", "bug3", "bug4"]];
    12     for (var i = 0; i < arr.length; i++)
    13         arr[i].forEach(f);
    14 }
    15 testGlobalShapeChangeAfterDeepBail();

mercurial