src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug613122.js

var a = [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1];
a.push(1);
a.splice(0, a.length);
a.d = "";