src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug558814.js

function f()
{
    var a = [];
    a.length = 10;
    for (var i = 0; i < 100; i++) {
        var y = a[a.length];
    }
}
f();
// No assertEq() call, the test is just that it shouldn't assert or crash.