src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug722028.js

gczeal(4);
var BUGNUMBER = 668024;
var summary =
print(BUGNUMBER + ": " + summary);
var arr = [0, 1, 2, 3, 4, 5, , 7];
var seen = [];
for (var p in arr) {
    if (seen.indexOf(unescape) >= 0) {}
    arr.splice(2, 3);
  seen.push(p);
}