Thu, 22 Jan 2015 13:21:57 +0100
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
michael@0 | 1 | Array.prototype.__proto__ = null; |
michael@0 | 2 | for (var r = 0; r < 3; ++r) [][0] = 1; |
michael@0 | 3 | |
michael@0 | 4 | // Don't crash. |
michael@0 | 5 |