src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug755832.js

var x;
function f(o) {
    o.prop = x = 3;
}
f({});
f(1);