src/third_party/mozjs-45/js/src/jit-test/tests/auto-regress/bug648739.js

// |jit-test| error:TypeError

// Binary: cache/js-dbg-64-6c8becdd1574-linux
// Flags:
//
(function () {
    [] = x = /x/;
    x.toString = Function.prototype.bind;
    print(x)
})()