src/third_party/mozjs-45/js/src/jit-test/tests/basic/bug877378.js

evalcx("\
    let z = 'x';\
    for (var v of z) {\
        y = evaluate(\"Object.defineProperty(this,\\\"y\\\",\
                         {get:  function() {}}\
                    );\",\
               {catchTermination: true, saveFrameChain: true}\
        );\
    }",
    newGlobal('')
)

evalcx("\
    for (x = 0; x < 1; ++x) { \
        v = evaluate(\"gc\",{ \
            saveFrameChain: true \
        })\
    }\
", newGlobal(''));