1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
// |reftest| skip-if(!xulRuntime.shell) slow
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
//-----------------------------------------------------------------------------
var BUGNUMBER = 476414;
var summary = 'Do not crash @ js_NativeSet';
var actual = '';
var expect = '';
printBugNumber(BUGNUMBER);
printStatus (summary);
function whatToTestSpidermonkeyTrunk(code)
{
return {
allowExec: true
};
}
whatToTest = whatToTestSpidermonkeyTrunk;
function tryItOut(code)
{
var wtt = whatToTest(code.replace(/\n/g, " ").replace(/\r/g, " "));
var f = new Function(code);
if (wtt.allowExec && f) {
rv = tryRunning(f, code);
}
}
function tryRunning(f, code)
{
try {
var rv = f();
} catch(runError) {}
}
var realFunction = Function;
var realToString = toString;
function tryEnsureSanity()
{
delete Function;
delete toString;
Function = realFunction;
toString = realToString;
}
for (let iters = 0; iters < 2000; ++iters) {
count=27745; tryItOut("with({x: (c) = (x2 = [])})false;");
tryEnsureSanity();
count=35594; tryItOut("switch(null) { case this.__defineSetter__(\"window\", function* () { yield \"\" } ): break; }");
tryEnsureSanity();
count=45020; tryItOut("with({}) { (this.__defineGetter__(\"x\", function (y) { return this; })); } ");
tryEnsureSanity();
count=45197; tryItOut("M:with((p={}, (p.z = false )()))/*TUUL*/for (let y of [true, {}, {}, (void 0), true, true, true, (void 0), true, (void 0)]) { return; }");
tryEnsureSanity();
gc();
tryEnsureSanity();
count=45254; tryItOut("for (NaN in this);");
tryEnsureSanity();
}
reportCompare(expect, actual, summary);
|
