michael@0: /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ michael@0: /* This Source Code Form is subject to the terms of the Mozilla Public michael@0: * License, v. 2.0. If a copy of the MPL was not distributed with this michael@0: * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ michael@0: michael@0: //----------------------------------------------------------------------------- michael@0: var BUGNUMBER = 364023; michael@0: var summary = 'Do not crash in JS_GetPrivate'; michael@0: var actual = 'No Crash'; michael@0: var expect = 'No Crash'; michael@0: michael@0: michael@0: //----------------------------------------------------------------------------- michael@0: test(); michael@0: //----------------------------------------------------------------------------- michael@0: michael@0: function test() michael@0: { michael@0: enterFunc ('test'); michael@0: printBugNumber(BUGNUMBER); michael@0: printStatus (summary); michael@0: michael@0: function exploit() { michael@0: var code = ""; michael@0: for(var i = 0; i < 0x10000; i++) { michael@0: if(i == 125) { michael@0: code += "void 0x10000050505050;\n"; michael@0: } else { michael@0: code += "void " + (0x10000000000000 + i) + ";\n"; michael@0: } michael@0: } michael@0: code += "function foo() {}\n"; michael@0: eval(code); michael@0: } michael@0: exploit(); michael@0: michael@0: reportCompare(expect, actual, summary); michael@0: michael@0: exitFunc ('test'); michael@0: }