The Tor Browser / file revision

• file
• revisions
• annotate
• diff
• comparison
• raw

js/src/jit-test/tests/jaeger/getter-hook-1.js@ac0c01689b40

js/src/jit-test/tests/jaeger/getter-hook-1.js

Thu, 15 Jan 2015 15:59:08 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Thu, 15 Jan 2015 15:59:08 +0100

branch

TOR_BUG_9701

changeset 10

ac0c01689b40

permissions

-rw-r--r--

Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

 // GETPROP PIC with multiple stubs containing getter hooks.

 function foo(arr) {

   for (var i = 0; i < 100; i++)

     arr[i].caller;

 }

 arr = Object.create(Object.prototype);

 first = Object.create({});

 first.caller = null;

 second = Object.create({});

 second.caller = null;

 for (var i = 0; i < 100; ) {

   arr[i++] = first;

   arr[i++] = foo;

   arr[i++] = second;

 }

 foo.caller;

 foo(arr);