src/third_party/mozjs-45/js/src/jit-test/tests/auto-regress/bug672104.js

// Binary: cache/js-dbg-64-a37127f33d22-linux
// Flags: -m -n
//
load(libdir + "immutable-prototype.js");

a = {};
b = __proto__;
for (i = 0; i < 9; i++) {
    if (globalPrototypeChainIsMutable()) {
        __proto__ = a;
        a.__proto__ = b
    }
}