1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/js/src/jit-test/tests/jaeger/bug616508.js Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,14 @@
1.4 +// |jit-test| error: ReferenceError
1.5 +// vim: set ts=8 sts=4 et sw=4 tw=99:
1.6 +
1.7 +// Note: modified from original test, which used Uint32Array in place of Array,
1.8 +// because the behavior has changed in a way that this will throw a TypeError
1.9 +// before it gets to testing what used to crash. I have no idea whether this
1.10 +// would actually crash the original version it was written for.
1.11 +try {
1.12 + (function () {
1.13 + __proto__ = Array()
1.14 + }())
1.15 +} catch (e) {}(function () {
1.16 + length, ([eval()] ? x : 7)
1.17 +})()
