The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/gc/bug-906243.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,12 @@
     1.4 +a2 = []
     1.5 +g = function() r
     1.6 +Object.defineProperty(a2, 0, {
     1.7 +    set: function() {}
     1.8 +})
     1.9 +for (var x = 0; x < 70; ++x) {
    1.10 +    Array.prototype.unshift.call(a2, g)
    1.11 +}
    1.12 +a2.length = 8
    1.13 +for each(e in [0, 0]) {
    1.14 +    Array.prototype.shift.call(a2)
    1.15 +}