src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug792166-1.js

Object.defineProperty(Object.prototype, 'x', {
    set: function() {}
});
var obj = {};
for (var i = 0; i < 100 ; ++i) {
    obj.x = 1;
    delete obj.x;
}