bug669706.js (262B)
1 function printStatus(msg) { 2 msg.toString() 3 lines = msg 4 for (var i = 0; i < lines; i++) i 5 } 6 var summary = new Float32Array; 7 try { 8 printStatus(summary) 9 x = { 10 } 11 toString.__proto__ = x 12 } catch (e) {} 13 var summary = 6; 14 printStatus(summary)