summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/jaeger/bug616508.js
blob: d29bf75f9b5e1e4763705d946626c0a39c839891 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
// |jit-test| error: ReferenceError
// vim: set ts=8 sts=4 et sw=4 tw=99:

// Note: modified from original test, which used Uint32Array in place of Array,
// because the behavior has changed in a way that this will throw a TypeError
// before it gets to testing what used to crash. I have no idea whether this
// would actually crash the original version it was written for.
try {
    (function () {
        __proto__ = Array()
    }())
} catch (e) {}(function () {
    length, ([eval()] ? x : 7)
})()