src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug643243.js

{
    function newSandbox(n) {}
}
var o12 = Float32Array.prototype;
function f12(o) {
    eval('o')['__proto_' + '_'] = null;
}
for (var i = 0; i < 14; i++) {
    gc()
    new f12(o12);
}