src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug660597.js

function foo() {
  with(foo) this["00"]=function(){}
}
new foo;