Sign in
cobalt
/
cobalt
/
c73ce7d5dfce7ae20bcc30efc5f220e0fbac12b1
/
.
/
src
/
third_party
/
mozjs-45
/
js
/
src
/
jit-test
/
tests
/
ion
/
bug784385.js
blob: 52d331d977db5f37befa321757fe6c7bcf5342e3 [
file
] [
log
] [
blame
]
Object
.
defineProperty
(
Object
.
prototype
,
"a"
,
{
set
:
function
(
a
)
{
eval
(
""
);
return
123
;
}
});
var
obj
=
{};
var
obj2
=
{
x
:
1
};
for
(
var
i
=
0
;
i
<
100
;
i
++)
{
var
res
=
(
obj
.
a
=
obj2
);
res
.
x
=
0xbeef
;
}