1 2 3 4 5 6 7 8 9 10 11 12 13
// Binary: cache/js-dbg-64-c811be25eaad-linux // Flags: // function f(o) { o.constructor = function() {}; } __proto__.__defineSetter__('constructor', function(v) {}); f({}); Object.defineProperty(__proto__, 'constructor', { writable: true, }); f({});