bug1544386-1.js (344B)
1 const arr = [{a: 0}, {a: 1}, {a: 2}, {a: 3}, {a: 4}]; 2 function f() { 3 if (arr.length == 0) { 4 arr[3] = {a: 5}; 5 } 6 var v = arr.pop(); 7 v.a; 8 for (var i = 0; i < 3000; i++) {} 9 } 10 var p = {}; 11 p.__proto__ = [{a: 0}, {a: 1}, {a: 2}]; 12 p[0] = -1.8629373288622089e-06; 13 arr.__proto__ = p; 14 for (var i = 0; i < 10; i++) { 15 f(); 16 }