src/third_party/mozjs-45/js/src/jit-test/tests/baseline/bug844467.js

function test() {
    var f;
    function gen() {
	f = function(){}
    }
    for (var i in gen()) {}
    arguments[arguments.length - 1];
}
test();