proxybug.js 3.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100
  1. //-------------------------------------------------------------------------------------------------------
  2. // Copyright (C) Microsoft. All rights reserved.
  3. // Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
  4. //-------------------------------------------------------------------------------------------------------
  5. var passed = true;
  6. function test1() {
  7. var sc4 = WScript.LoadScript('function test(){ obj2.prop4 = {needMarshal:true}; }', 'samethread');
  8. var obj1 = new Proxy({}, { set: function (target, property, value) { Reflect.set(value); } })
  9. sc4.obj2 = obj1;
  10. sc4.test();
  11. obj1.prop4 = { needMarshal: false };
  12. obj1.prop5 = { needMarshal: false };
  13. };
  14. test1();
  15. function test2() {
  16. var bug = new Proxy(new Array(1), { has: () => true });
  17. var a = bug.concat();
  18. if (a[0] !== undefined || a.length !== 1) {
  19. passed = false;
  20. } else {
  21. passed &= true;
  22. }
  23. }
  24. test2();
  25. function test3() {
  26. var obj1 = {};
  27. var arrObj0 = {};
  28. var x = 1
  29. var proxyHandler = {};
  30. proxyHandler['get'] = function () { };
  31. proxyHandler['defineProperty'] = function (target, property, descriptor) {
  32. return Reflect.defineProperty(target, property, descriptor);
  33. };
  34. proxyHandler['isExtensible'] = function (target) {
  35. arrObj0.prop0;
  36. arrObj0 = new Proxy(arrObj0, proxyHandler);
  37. return Reflect.isExtensible(target);
  38. };
  39. arrObj0 = new Proxy(arrObj0, proxyHandler);
  40. arrObj0 = new Proxy(arrObj0, proxyHandler);
  41. do {
  42. var sc3 = WScript.LoadScript('function test(){arrObj0.length = arrObj0[obj1];}', 'samethread');
  43. sc3.obj1 = obj1;
  44. sc3.arrObj0 = arrObj0;
  45. sc3.test();
  46. } while (x--);
  47. }
  48. test3();
  49. function test4() {
  50. var func3 = function () { };
  51. var ary = Array();
  52. var proxyHandler = {};
  53. var ownkeys = Reflect.ownKeys(ary);
  54. proxyHandler['ownKeys'] = function () {
  55. func3() == 0;
  56. return ownkeys;
  57. };
  58. ary = new Proxy(ary, proxyHandler);
  59. var sc2 = WScript.LoadScript('function test(){for (var x in ary);}', 'samethread');
  60. sc2.ary = ary;
  61. sc2.func3 = func3;
  62. sc2.test();
  63. }
  64. test4();
  65. function test5() {
  66. function makeArrayLength() {
  67. }
  68. function leaf() {
  69. }
  70. var obj1 = {};
  71. var arrObj0 = {};
  72. var func1 = function () {
  73. };
  74. obj1.method0 = func1;
  75. obj1.method1 = func1;
  76. var protoObj1 = Object();
  77. var proxyHandler = {};
  78. var v0 = new Proxy(obj1.method0, proxyHandler);
  79. var sc9 = WScript.LoadScript('', 'samethread');
  80. sc9.arrObj0 = arrObj0;
  81. sc9.obj1 = obj1;
  82. sc9.protoObj1 = protoObj1;
  83. sc9.v0 = v0;
  84. sc9.makeArrayLength = makeArrayLength;
  85. sc9.leaf = leaf;
  86. var sc9_cctx = sc9.WScript.LoadScript('function test() {var b = 1; arrObj0.length= makeArrayLength((arrObj0.length != arrObj0.prop4));\n var d = obj1.method1.call(protoObj1 , (((new v0((protoObj1.length >>>= -866043558),(protoObj1.prop0 = 1),leaf,leaf)) , (b ? 1 : 16678541)) & (typeof(arrObj0.prop4) == \'number\') ), ((1) * (d %= (1 * obj1.length - b)) + obj1.method0.call(arrObj0 , ("a" instanceof ((typeof RegExp == \'function\' ) ? RegExp : Object)), (\'prop0\' in arrObj0), leaf, leaf)), leaf, leaf);\n var uniqobj21 = Object.create(arrObj0);\n arrObj0.length= makeArrayLength(((1 ) % -520343586));\n ;\n }');
  87. sc9_cctx.test();
  88. }
  89. test5();
  90. print(passed ? "passed" : "failed");