src/third_party/mozjs-45/js/src/jit-test/tests/ion/bug911707.js - cobalt - Git at Google

 // |jit-test| ion-eager
 x = [ "CNY", "TWD", "invalid" ];
 Object.freeze(x).map(function() {
     x.length = 6
 })
	// \|jit-test\| ion-eager
	x = [ "CNY", "TWD", "invalid" ];
	Object.freeze(x).map(function() {
	x.length = 6
	})