js/src/jit-test/tests/auto-regress/bug648992.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

// Binary: cache/js-dbg-32-74a8fb1bbec5-linux
// Flags: -m -n -a
//
o0 = (3).__proto__
function f(o) {
    var prop
    [o][0][prop] = []
    try {
        ({
            x: function() {
                return o
            }
        }.x()())
    } catch (e) {}
}
f(o0)