blob: 38827c908dc40f93f3aa4c25cafdbe938518e295 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
// Don't crash when a scripted proxy handler throws Error.prototype.
var g = newGlobal({newCompartment: true});
var dbg = Debugger(g);
dbg.onDebuggerStatement = function (frame) {
try {
frame.arguments[0].deleteProperty("x");
} catch (exc) {
return;
}
throw new Error("deleteProperty should throw");
};
g.eval("function h(obj) { debugger; }");
g.eval("h(new Proxy({}, { deleteProperty() { throw Error.prototype; }}));");
|
