src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/bug650662.js

test();
function test() {
  var a = [];
  a*=3;
  a.length;
}