js/src/jit-test/tests/jaeger/bug656252.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14

o14 = [undefined].__proto__
function f18() {
  try {
    [] = o[p]
  } catch (e) {}
}
for (var i; i < 20; i++) {
  ({
    x: function() {
      return eval("o14")
    }
  }.x().__proto__ = null);
  f18()
}