bug1204722.js (94B)
1 x = [1e81]; 2 x.map(function() {}); 3 x.pop(); 4 x.push([]); 5 [].map(function() {}); 6 eval("[1/0]");