src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug831424-1.js

// |jit-test| error: TypeError
x = [];
Object.defineProperty(this, "y", {
    get: function() {
        FakeDOMObject.caller
    }
});
Object.defineProperty(x, 3, {
    get: function() {
        y[13];
    }
});
(function() {
    x.shift();
})();