bug666599.js (332B)
1 // Binary: cache/js-dbg-32-0428dbdf3d58-linux 2 // Flags: 3 // 4 o1 = new Float32Array().buffer 5 o2 = ArrayBuffer.prototype 6 o3 = new Uint32Array().buffer 7 for (i = 0; i < 2; i++) { 8 for (var x in o2) { 9 o3.__defineGetter__("", function() {}) 10 } 11 o2.__defineGetter__("", function() {}) 12 o1[ 13 x] 14 o1.__proto__ = o3 15 }