summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/auto-regress/bug488015.js
blob: 5d19c2b95bc6f9d530749460357e874931a55ead (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
// Binary: cache/js-dbg-64-e1257570fef8-linux
// Flags:
//
var a = [];
function addEventListener(e, f, g)
{
  a.push(f);
}
function setTimeout(f, t)
{
  a.push(f);
}
var b;
this.document = {};
function e(w) {
  addEventListener("mousedown", d, true);
  function d() {
    var d;
    w.setTimeout(function() {
        b(d);
      }, 0);
  }
  function b(d){
    w.document;  /* Crash Here!! */
  }
}
e(this);
a[0]();
a[1]();