blob: dfe76c8b41512f704223cb7128a778005cb4f500 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
let g = newGlobal({ newCompartment: true });
g.parent = this;
g.eval(
"(" +
function () {
Debugger(parent).onExceptionUnwind = function (frame) {
frame.older;
};
} +
")()"
);
function f(x, y) {
try {
Object.setPrototypeOf(
y,
new Proxy(Object.getPrototypeOf(y), {
get(a, b, c) {
return undefined;
},
})
);
} catch (e) {}
}
function h(x, y) {
f(x, y);
}
oomTest(function () {
h("", undefined);
h("", "");
"".replaceAll();
});
|
