bug3.shrua-3.js 1.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253
  1. //-------------------------------------------------------------------------------------------------------
  2. // Copyright (C) Microsoft. All rights reserved.
  3. // Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
  4. //-------------------------------------------------------------------------------------------------------
  5. function test0() {
  6. function makeArrayLength(x) {
  7. if (!(x < 1)) {
  8. return Math.floor();
  9. }
  10. }
  11. var obj2 = {};
  12. var func1 = function () {
  13. y = ~(++this.prop5 >>> protoObj1.prop3)
  14. protoObj1.length = makeArrayLength(y);
  15. };
  16. obj2.method0 = func1;
  17. protoObj1 = Object();
  18. Object.prototype.prop5 = -1921245026.9;
  19. obj2.method0();
  20. WScript.Echo(protoObj1.length);
  21. }
  22. test0();
  23. test0();
  24. test0();
  25. test0();
  26. test0();
  27. test0();
  28. test0();
  29. test0();
  30. test0();
  31. test0();
  32. test0();
  33. test0();
  34. test0();
  35. test0();
  36. test0();
  37. test0();
  38. test0();
  39. test0();
  40. test0();
  41. test0();
  42. test0();
  43. test0();
  44. test0();
  45. test0();