src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug631219.js

// don't assert or crash
function g(o) {
    o.__proto__ = arguments;
    o.length = 123;
}
function f() {
    g(arguments);
}
f();