src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug1015766.js

gczeal(8, 2)
try {
    [new String, y]
} catch (e) {}
r = /()/
try {
    "".replace(r, () => {
	[]()
    });
} catch(e) {}