bug616508.js (502B)
1 // |jit-test| error: ReferenceError 2 // vim: set ts=8 sts=4 et sw=4 tw=99: 3 4 // Note: modified from original test, which used Uint32Array in place of Array, 5 // because the behavior has changed in a way that this will throw a TypeError 6 // before it gets to testing what used to crash. I have no idea whether this 7 // would actually crash the original version it was written for. 8 try { 9 (function () { 10 __proto__ = Array() 11 }()) 12 } catch (e) {}(function () { 13 length, ([eval()] ? x : 7) 14 })()