js/src/jit-test/tests/basic/bug1656744.js


1
2
3
4
5
6
7
8

Array.prototype[0] = 'x';
Array.prototype[1] = 'x';
var arr = [];
for (var p in arr) {
    arr[0] = 0;
    arr[1] = 1;
    arr.reverse();
}