src/third_party/mozjs-45/js/src/jit-test/tests/ion/typedarray-static-load.js

var buffer = new ArrayBuffer(512 * 1024);
var ta = new Uint8Array(buffer);

function load() { return ta[0x1234]; }

load();
load();
load();

neuter(buffer, "change-data");

load();