| // |jit-test| error: ReferenceError | |
| // vim: set ts=8 sts=4 et sw=4 tw=99: | |
| // Note: modified from original test, which used Uint32Array in place of Array, | |
| // because the behavior has changed in a way that this will throw a TypeError | |
| // before it gets to testing what used to crash. I have no idea whether this | |
| // would actually crash the original version it was written for. | |
| try { | |
| (function () { | |
| __proto__ = Array() | |
| }()) | |
| } catch (e) {}(function () { | |
| length, ([eval()] ? x : 7) | |
| })() |