michael@0: Array.prototype.__proto__ = null;
michael@0: for (var r = 0; r < 3; ++r) [][0] = 1;
michael@0: 
michael@0: // Don't crash.
michael@0: