src/third_party/mozjs-45/js/src/jit-test/tests/ion/recover-object-bug1174322.js

function f(y) {
    Math.min(NaN) ? a : y
}
function g(y) {
    f({
        e: false
    })
}
x = [0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
     0, 0, 0, 0, 0, 0, 0, 0, 0, 0]
for (var j = 0; j < 23; ++j) {
    g(x[j])
}