js/src/jit-test/tests/jaeger/bug615440.js

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/jaeger/bug615440.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,5 @@
     1.4 +Array.prototype.__proto__ = null;
     1.5 +for (var r = 0; r < 3; ++r) [][0] = 1;
     1.6 +
     1.7 +// Don't crash.
     1.8 +

mercurial