bug1821959.js (268B)
1 // Transplant an object that is using the shifted-dense-elements optimization 2 const v1 = this.transplantableObject(); 3 const v2 = v1.object; 4 Array.prototype.push.call(v2, 0); 5 Array.prototype.push.call(v2, 0); 6 Array.prototype.shift.call(v2); 7 v1.transplant(newGlobal());