src/third_party/mozjs-45/js/src/jit-test/tests/gc/bug-961741.js

function r() {
    for (var x in undefined) {}
}
enableShellObjectMetadataCallback();
r();