Source code

Revision control

Copy as Markdown

Other Tools

// |jit-test| error: ReferenceError
// vim: set ts=8 sts=4 et sw=4 tw=99:
// Note: modified from original test, which used Uint32Array in place of Array,
// because the behavior has changed in a way that this will throw a TypeError
// before it gets to testing what used to crash. I have no idea whether this
// would actually crash the original version it was written for.
try {
(function () {
__proto__ = Array()
}())
} catch (e) {}(function () {
length, ([eval()] ? x : 7)
})()