bug737737.js (539B)
1 // Binary: cache/js-dbg-32-e96d5b1f47b8-linux 2 // Flags: --ion-eager 3 // 4 function b(z) { 5 switch (z) { 6 default: 7 primarySandbox = newGlobal() 8 } 9 return function(f, code) { 10 try { 11 evalcx(code, primarySandbox) 12 } catch (e) {} 13 } 14 } 15 function a(code) { 16 gc(); 17 f = Function(code) 18 c(f, code) 19 } 20 c = b() 21 a("\ 22 f2 = (function() {\ 23 a0 + o2.m;\ 24 a2.shift()\ 25 });\ 26 a2 = new Array;\ 27 Object.defineProperty(a2, 0, {\ 28 get: f2\ 29 });\ 30 o2 = {};\ 31 a0 = [];\ 32 a2.shift();\ 33 var x;\ 34 ") 35 a("a0 = x") 36 a("a2.shift()")