bug844383.js (346B)
1 s = newGlobal() 2 try { 3 evalcx("\ 4 function g() {\ 5 h()\ 6 }\ 7 for (p in this) {\ 8 function h(h) {\ 9 ''instanceof 5\ 10 }\ 11 }\ 12 h.valueOf=g;\ 13 h==9\ 14 ", s) 15 } catch (e) {} 16 try { 17 evalcx("throw h", s) 18 } catch (e) { 19 try { 20 "" + e 21 } catch(e) {} 22 }