bug1939008.js (309B)
1 function test() { 2 var ta = new Int8Array(1); 3 Object.setPrototypeOf(Array.prototype, ta); 4 for (var i = 0; i < 20; i++) { 5 var arr = []; 6 arr[0] = 1; 7 arr[10] = 1; // No-op 8 arr[1_000_000] = 1; // No-op 9 assertEq(arr.length, 1); 10 assertEq(arr[0], 1); 11 } 12 assertEq(ta[0], 0); 13 } 14 test();