summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/jaeger/bug615440.js
blob: 1ed4cd1c043d07e9bfb35e9f254fe28dcffa7993 (plain)
1
2
3
4
5
Array.prototype.__proto__ = null;
for (var r = 0; r < 3; ++r) [][0] = 1;

// Don't crash.