summaryrefslogtreecommitdiffstats
path: root/js/src/tests/js1_8_5/extensions/clone-forge.js
blob: 3cdb0ea0dff40674b0c47c9baef47aad9c539f25 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
// |reftest| skip-if(!xulRuntime.shell)
// -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*-
// Any copyright is dedicated to the Public Domain.
// http://creativecommons.org/licenses/publicdomain/

function assertThrows(f) {
    var ok = false;
    try {
        f();
    } catch (exc) {
        ok = true;
    }
    if (!ok)
        throw new TypeError("Assertion failed: " + f + " did not throw as expected");
}

function byteArray(str) {
    return str.split('').map(c => c.charCodeAt(0));
}

// Don't allow forging bogus Date objects.
var mutated = byteArray(serialize(new Date(NaN)).clonebuffer);

var a = [1/0, -1/0,
         Number.MIN_VALUE, -Number.MIN_VALUE,
         Math.PI, 1286523948674.5,
         Number.MAX_VALUE, -Number.MAX_VALUE,
         8.64e15 + 1, -(8.64e15 + 1)];
for (var i = 0; i < a.length; i++) {
    var n = a[i];
    var nbuf = serialize(n);
    var data = byteArray(nbuf.clonebuffer);
    for (var j = 0; j < 8; j++)
      mutated[j+8] = data[j];
    nbuf.clonebuffer = String.fromCharCode.apply(null, mutated);
    assertThrows(function () { deserialize(nbuf); });
}

reportCompare(0, 0);