js/src/jit-test/tests/jaeger/bug615440.js

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:9f3a525bb5b6
1 Array.prototype.__proto__ = null;
2 for (var r = 0; r < 3; ++r) [][0] = 1;
3
4 // Don't crash.
5

mercurial