1 2 3 4 5 6 7 8
Object.prototype[3] = 3 x = Array() function f() { for (i = 0; i < 9; i++) { if (Object[x++] != 0) {} } } f()