1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/js/src/jit-test/tests/auto-regress/bug658803.js Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,17 @@ 1.4 +// Binary: cache/js-dbg-32-33f1ad45ccb8-linux 1.5 +// Flags: -m -n 1.6 +// 1.7 +function f() { 1.8 + var N = 624; 1.9 + this.init_genrand = function(s) { 1.10 + for (z = 1; z < N; z++) {} 1.11 + }; 1.12 +}(function() { 1.13 + new f; 1.14 +}()); 1.15 +function g(o) { 1.16 + var props = Object.getOwnPropertyNames(o); 1.17 + var prop = props[props.length - 1] + "p" 1.18 + o[prop] = Number.prototype.__proto__; 1.19 +} 1.20 +g(Number.prototype.__proto__);