src/third_party/mozjs-45/js/src/jit-test/tests/basic/array-proto-outofrange.js

function f(obj) {
    return typeof obj[15];
}

function test() {
    var a = [1, 2];
    a.__proto__ = {15: 1337};
    var b = [1, 2, 3, 4];

    for (var i = 0; i < 1000; i++) {
        var r = f(i % 2 ? a : b);
        assertEq(r, i % 2 ? "number" : "undefined");
    }
}

test();
test();
test();