src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug852174.js

function eval()
  isPrototypeOf[Iterator.length] 
function DoWhile_3()
  eval();
DoWhile_3();
function f()
  DoWhile_3(f - 0);
for (var i in f());