blob: 714cb27d8c8c3b82c0fb3f0957d8d806e0105db4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
// |jit-test| error: ReferenceError
// Note: modified from original test, which used Uint32Array in place of Array,
// because the behavior has changed in a way that this will throw a TypeError
// before it gets to testing what used to crash. I have no idea whether this
// would actually crash the original version it was written for.
try {
(function () {
__proto__ = Array()
}())
} catch (e) {}(function () {
length, ([eval()] ? x : 7)
})()
|
