| // Copyright 2015 the V8 project authors. All rights reserved. | |
| // Use of this source code is governed by a BSD-style license that can be | |
| // found in the LICENSE file. | |
| function foo(a, s) { a[s] = 35; } | |
| var x = { bilbo: 3 }; | |
| var y = { frodo: 3, bilbo: 'hi' }; | |
| foo(x, "bilbo"); | |
| foo(x, "bilbo"); | |
| // Without the fix for 4495, this will crash on ia32: | |
| foo(y, "bilbo"); |