src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug1196648.js

h = function(m, foreign, n) {
    "use asm";
    var ff = foreign.ff;
    function f(x) {
        x = +x;
        ff();
    }
    return f;
}(0, {
    ff: function() {
        return {
            e: String.prototype.substring
        };
    }
}, 0);
for (var k = 0; k < 999; k++) {
    h();
}