v8/test/mjsunit/regress/regress-crbug-1022695.js

// Copyright 2019 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

assertThrows(() => {
  (function (foo, foreign) {
      'use asm';
      var f = foreign.toString;
      function get() {
          f();
      }
      return get;
  })(this, new Error())();
});