FilesExpand file tree

 master

/

array_splice4.js

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

43 lines (37 loc) · 1.23 KB

 master

/

array_splice4.js

Top

File metadata and controls

• Code
• Blame

43 lines (37 loc) · 1.23 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

//-------------------------------------------------------------------------------------------------------

// Copyright (C) Microsoft. All rights reserved.

// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.

//-------------------------------------------------------------------------------------------------------

// BLUE#5602: User Mode Write AV starting at Js::SparseArraySegment::EnsureSizeInBound+0x000000000000001a (Hash=0x3c06064b.0x23355e69)

var echo=WScript.Echo

function func2()

{}

// from bug BLUE 5602

function func()

{

e="div".match(func2());

echo("e = " + e + " ; e.length = " + e.length);

e.length=58;

echo("e = " + e + " ; e.length = " + e.length);

e.splice(1);//es.splice(1,17); is OK too

echo("e = " + e + " ; e.length = " + e.length);

}

// from bug BLUE 5602

function func_test2()

{

e="div".match(func2());

echo("e = " + e + " ; e.length = " + e.length);

e.length=58;

echo("e = " + e + " ; e.length = " + e.length);

e.splice(1,17);

echo("e = " + e + " ; e.length = " + e.length);

}

function start()

{

echo ("start- func()");

func();

echo ("start- func_test2()");

func_test2();

echo ("start- done");

}

start();