js/xpconnect/crashtests/977538.html

   1 <script>
   2 function f() {
   3   var buffer = new Uint8Array(8);
   4
   5   for (var i=0; i<100; i++) {}
   6
   7   buffer[0] = 0xff;
   8   buffer[1] = 0xff;
   9   buffer[2] = 0xff;
  10   buffer[3] = 0xff;
  11   buffer[4] = 0xff;
  12   buffer[5] = 0xff;
  13   buffer[6] = 0x0f;
  14   buffer[7] = 0x00;
  15
  16   var view = new DataView(buffer.buffer);
  17   view.getFloat64(0);
  18 }
  19 f();
  20 </script>