src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug640993.js

function f() {
    return f;
}
f.__proto__ = null;
gc();
f();
new f();