src/v8/test/mjsunit/regress/regress-760790.js

// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

function g() {
  var a = Array(0);
  a[0]++;
}
g();
g();
g();