src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/bug649689.js

function f(x) {
    eval("a = 3");
    x.p = x.p = a;
    assertEq(x.p, 3);
}
f({p: 2});