summaryrefslogtreecommitdiffstats
path: root/dom/indexedDB/crashtests
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
commit36d22d82aa202bb199967e9512281e9a53db42c9 (patch)
tree105e8c98ddea1c1e4784a60a5a6410fa416be2de /dom/indexedDB/crashtests
parentInitial commit. (diff)
downloadfirefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.tar.xz
firefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.zip
Adding upstream version 115.7.0esr.upstream/115.7.0esr
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'dom/indexedDB/crashtests')
-rw-r--r--dom/indexedDB/crashtests/1499854-1.html29
-rw-r--r--dom/indexedDB/crashtests/1505821-1.html16
-rw-r--r--dom/indexedDB/crashtests/1543154-1.html11
-rw-r--r--dom/indexedDB/crashtests/1813284-1.html6
-rw-r--r--dom/indexedDB/crashtests/726376-1.html7
-rw-r--r--dom/indexedDB/crashtests/crashtests.list5
6 files changed, 74 insertions, 0 deletions
diff --git a/dom/indexedDB/crashtests/1499854-1.html b/dom/indexedDB/crashtests/1499854-1.html
new file mode 100644
index 0000000000..0e10601134
--- /dev/null
+++ b/dom/indexedDB/crashtests/1499854-1.html
@@ -0,0 +1,29 @@
+<html>
+
+<head>
+ <script>
+ function start() {
+ o1 = new Int32Array(51488)
+ o2 = new ArrayBuffer(13964)
+ for (let i = 0; i < 51488; i++) o1[i] = 0x41
+ const dbRequest = window.indexedDB.open('', {})
+ dbRequest.onupgradeneeded = function(event) {
+ const store = event.target.result.createObjectStore('IDBStore_0', {})
+ store.add({}, 'ObjectKey_0')
+ store.add({
+ data: undefined,
+ index_key_0: o1,
+ index_key_1: o2
+ }, 'ObjectKey_1')
+ store.createIndex('IDBIndex_1', ['index_key_0', 'index_key_1'], {
+ unique: false,
+ multiEntry: false,
+ locale: 'fr'
+ })
+ }
+ }
+ document.addEventListener('DOMContentLoaded', start)
+ </script>
+</head>
+
+</html>
diff --git a/dom/indexedDB/crashtests/1505821-1.html b/dom/indexedDB/crashtests/1505821-1.html
new file mode 100644
index 0000000000..da4bd31ab3
--- /dev/null
+++ b/dom/indexedDB/crashtests/1505821-1.html
@@ -0,0 +1,16 @@
+<script>
+ const dbRequest = window.indexedDB.open('bug1505821_1_hello');
+ dbRequest.onupgradeneeded = function (event) {
+ const store = event.target.result.createObjectStore('IDBStore_1', {autoIncrement: true});
+ store.createIndex('I', [''], {unique: true});
+ store.createIndex('J', ['a', ''], {unique: true});
+ store.createIndex('M', ['', 'a'], {unique: true});
+ store.createIndex('K', ['', 'a', ''], {unique: true});
+ store.createIndex('L', ['', '', ''], {unique: true});
+ }
+
+ const dbRequest2 = window.indexedDB.open('bug1505821_1_hello');
+ dbRequest.onsuccess = function (event) {
+ window.indexedDB.deleteDatabase("bug1507229_1_hello");
+ }
+</script>
diff --git a/dom/indexedDB/crashtests/1543154-1.html b/dom/indexedDB/crashtests/1543154-1.html
new file mode 100644
index 0000000000..b40121ed43
--- /dev/null
+++ b/dom/indexedDB/crashtests/1543154-1.html
@@ -0,0 +1,11 @@
+<script>
+ window.addEventListener('load', () => {
+ let a = document.createElementNS('http://www.w3.org/1999/xhtml', 'frame')
+ document.documentElement.appendChild(a)
+ let b = a.contentWindow.indexedDB
+ while (document.documentElement.lastElementChild) {
+ document.documentElement.removeChild(document.documentElement.lastElementChild)
+ }
+ b.open('', { })
+ })
+</script>
diff --git a/dom/indexedDB/crashtests/1813284-1.html b/dom/indexedDB/crashtests/1813284-1.html
new file mode 100644
index 0000000000..fd1d8987bc
--- /dev/null
+++ b/dom/indexedDB/crashtests/1813284-1.html
@@ -0,0 +1,6 @@
+<script>
+ // This test allocates >= 4GB of memory even if it succeeds.
+ let a = new ArrayBuffer(4294967296)
+ let b = new Uint32Array(a)
+ self.indexedDB.cmp(b, undefined)
+</script>
diff --git a/dom/indexedDB/crashtests/726376-1.html b/dom/indexedDB/crashtests/726376-1.html
new file mode 100644
index 0000000000..4187678fa8
--- /dev/null
+++ b/dom/indexedDB/crashtests/726376-1.html
@@ -0,0 +1,7 @@
+<script>
+
+var a = [];
+a[0] = a;
+indexedDB.cmp.bind(indexedDB)(a, a);
+
+</script>
diff --git a/dom/indexedDB/crashtests/crashtests.list b/dom/indexedDB/crashtests/crashtests.list
new file mode 100644
index 0000000000..2450ea9f85
--- /dev/null
+++ b/dom/indexedDB/crashtests/crashtests.list
@@ -0,0 +1,5 @@
+load 726376-1.html
+load 1499854-1.html
+load 1505821-1.html
+load 1543154-1.html
+skip-if(!is64Bit) skip-if(Android) skip-if(AddressSanitizer) skip-if(ThreadSanitizer) load 1813284-1.html