js/src/jit-test/tests/ion/bug930993.js

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:285d3f01b011
1 x = {};
2 y = x;
3 x.toString = function() {
4 new Int8Array(ArrayBuffer)[0] = new Float32Array(ArrayBuffer)[0];
5 }
6 print(x << y);

mercurial