js/src/jit-test/tests/ion/bug783590.js


1
2
3
4
5
6
7
8
9
10
11
12
13

// |jit-test| error: TypeError

var glob = this;
var arr = [];
Object.defineProperty(arr, 0, {
  get: (function() {
    glob.__proto__;
  })
});
try {
  arr.pop();
} catch (e) {}
arr.pop();