1 // Copyright 2008 the V8 project authors. All rights reserved. 2 // Redistribution and use in source and binary forms, with or without 3 // modification, are permitted provided that the following conditions are 4 // met: 5 // 6 // * Redistributions of source code must retain the above copyright 7 // notice, this list of conditions and the following disclaimer. 8 // * Redistributions in binary form must reproduce the above 9 // copyright notice, this list of conditions and the following 10 // disclaimer in the documentation and/or other materials provided 11 // with the distribution. 12 // * Neither the name of Google Inc. nor the names of its 13 // contributors may be used to endorse or promote products derived 14 // from this software without specific prior written permission. 15 // 16 // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 17 // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 18 // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 19 // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 20 // OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 21 // SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 22 // LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 23 // DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 24 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 25 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 26 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 27 28 var builtInPropertyNames = [ 29 'prototype', 'length', 'caller', 0, 1, '$1', 'arguments', 'name', 'message', 'constructor' 30 ]; 31 32 function getAnException() { 33 try { 34 ("str")(); 35 } catch (e) { 36 return e; 37 } 38 } 39 40 function getSpecialObjects() { 41 return [ 42 function () { }, 43 [1, 2, 3], 44 /xxx/, 45 RegExp, 46 "blah", 47 9, 48 new Date(), 49 getAnException() 50 ]; 51 } 52 53 var object = { }; 54 var fun = function () { }; 55 var someException = getAnException(); 56 var someDate = new Date(); 57 58 var objects = [ 59 [1, Number.prototype], 60 ["foo", String.prototype], 61 [true, Boolean.prototype], 62 [object, object], 63 [fun, fun], 64 [someException, someException], 65 [someDate, someDate] 66 ]; 67 68 function runTest(fun) { 69 for (var i in objects) { 70 var obj = objects[i][0]; 71 var chain = objects[i][1]; 72 var specialObjects = getSpecialObjects(); 73 for (var j in specialObjects) { 74 var special = specialObjects[j]; 75 chain.__proto__ = special; 76 for (var k in builtInPropertyNames) { 77 var propertyName = builtInPropertyNames[k]; 78 fun(obj, propertyName); 79 } 80 } 81 } 82 } 83 84 runTest(function (obj, name) { return obj[name]; }); 85 runTest(function (obj, name) { return obj[name] = { }; }); 86