src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/bug684084-2.js

function Function() {
    try {
    var g = this;
    g.c("evil", eval);
    } catch(b) {}
}
var o0 = Function.prototype;
var f = new Function( (null ) );