The Tor Browser / file revision

• file
• revisions
• annotate
• diff
• comparison
• raw

js/src/jit-test/tests/jaeger/getter-hook-2.js@ac0c01689b40

js/src/jit-test/tests/jaeger/getter-hook-2.js

Thu, 15 Jan 2015 15:59:08 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Thu, 15 Jan 2015 15:59:08 +0100

branch

TOR_BUG_9701

changeset 10

ac0c01689b40

permissions

-rw-r--r--

Implement a real Private Browsing Mode condition by changing the API/ABI;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

 // PIC on CALLPROP invoking getter hook.

 function foo(arr) {

   for (var i = 0; i < 100; i++)

     arr[i].caller(false);

 }

 arr = Object.create(Object.prototype);

 first = Object.create({});

 first.caller = bar;

 second = Object.create({});

 second.caller = bar;

 for (var i = 0; i < 100; )

   arr[i++] = foo;

 foo.caller;

 function bar(x) {

   if (x)

     foo(arr);

 }

 bar(true);