summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/jaeger/bug617558.js
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--js/src/jit-test/tests/jaeger/bug617558.js7
1 files changed, 7 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/jaeger/bug617558.js b/js/src/jit-test/tests/jaeger/bug617558.js
new file mode 100644
index 0000000000..1bbd30f21a
--- /dev/null
+++ b/js/src/jit-test/tests/jaeger/bug617558.js
@@ -0,0 +1,7 @@
+
+Array.prototype.__proto__ = Function.prototype;
+var x = [1,2,3];
+x[0];
+
+[].__proto__.foo = true;
+eval("[]");