src/third_party/mozjs-45/js/src/jit-test/tests/basic/testBug579602.js

// don't panic

f = function() {
  x = yield
}
rv = f()
for (a in rv) (function() {})
x = Proxy.create((function() {
  return {
    defineProperty: gc
  }
})(), x)
with({
  d: (({
    x: Object.defineProperty(x, "", ({
      set: Array.e
    }))
  }))
}) {}

// don't crash