Sign in
cobalt
/
cobalt
/
c73ce7d5dfce7ae20bcc30efc5f220e0fbac12b1
/
.
/
src
/
third_party
/
mozjs-45
/
js
/
src
/
jit-test
/
tests
/
jaeger
/
bug617558.js
blob: 1bbd30f21a7785c4faa153c1db7710978ed4af2d [
file
] [
log
] [
blame
]
Array
.
prototype
.
__proto__
=
Function
.
prototype
;
var
x
=
[
1
,
2
,
3
];
x
[
0
];
[].
__proto__
.
foo
=
true
;
eval
(
"[]"
);