From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- .../tests/non262/extensions/regress-311792-02.js | 40 ++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 js/src/tests/non262/extensions/regress-311792-02.js (limited to 'js/src/tests/non262/extensions/regress-311792-02.js') diff --git a/js/src/tests/non262/extensions/regress-311792-02.js b/js/src/tests/non262/extensions/regress-311792-02.js new file mode 100644 index 0000000000..3b01415598 --- /dev/null +++ b/js/src/tests/non262/extensions/regress-311792-02.js @@ -0,0 +1,40 @@ +/* -*- indent-tabs-mode: nil; js-indent-level: 2 -*- */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +//----------------------------------------------------------------------------- +var BUGNUMBER = 311792; +var summary = 'Root Array.prototype methods'; +var actual = 'No Crash'; +var expect = 'No Crash'; + +printBugNumber(BUGNUMBER); +printStatus (summary); + +var subverted = 0; + +function index_getter() +{ + delete a[0]; + gc(); + for (var i = 0; i != 1 << 14; ++i) { + var tmp = new String("test"); + tmp = null; + } + return 1; +} + +function index_setter(value) +{ + subverted = value; +} + +var a = [ Math.sqrt(2), 0 ]; +a.__defineGetter__(1, index_getter); +a.__defineSetter__(1, index_setter); + +a.reverse(); +printStatus(subverted) + + reportCompare(expect, actual, summary); -- cgit v1.2.3