bug1471361.js (272B)
1 // This is a fuzzer-found crash inducing test. 2 // Pass is simply not crashing. 3 (function () { 4 f = function(y) { 5 ~+y; 6 } 7 x = [new Number]; 8 for (var j = 0; j < 3; ++j) { 9 for (var k = 0; k < 3; ++k) { 10 f(x[k]); 11 } 12 } 13 })();