| // Copyright 2016 the V8 project authors. All rights reserved. | |
| // Use of this source code is governed by a BSD-style license that can be | |
| // found in the LICENSE file. | |
| var custom_toString = function() { | |
| var boom = custom_toString.caller; | |
| return boom; | |
| } | |
| var object = {}; | |
| object.toString = custom_toString; | |
| try { Object.hasOwnProperty(object); } catch (e) {} |