michael@0: function f1() { michael@0: } michael@0: function f2() { michael@0: } michael@0: function f3(o) { michael@0: f2 = Date.prototype; michael@0: } michael@0: var key = Object.getOwnPropertyNames(f1)[30]; michael@0: if(key) { michael@0: f3 = f1[key]; michael@0: } michael@0: gc(); michael@0: gc(); michael@0: try { michael@0: for(var i=0; i<10; i++) { michael@0: delete f2[1]; michael@0: f3(function() {}); michael@0: } michael@0: } catch (e) {}