src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug898857.js

function fillHeap() {
  var x = 1, tmp;
  for (var i = 0; i < 50000; ++i)
    tmp <<=  x / 3;
}
RegExp({ toString: fillHeap });