blob: 6d7bdc4dc9f9e5184a0ca7f65d7318e67d8eee97 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
function testDenseArrayProp()
{
[].__proto__.x = 1;
({}).__proto__.x = 2;
var a = [[],[],[],({}).__proto__];
for (var i = 0; i < a.length; ++i)
JSON.stringify(a[i].x);
delete [].__proto__.x;
delete ({}).__proto__.x;
return "ok";
}
assertEq(testDenseArrayProp(), "ok");
|