src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/bug684943.js

function foo(x) {
  for (var i = 0; i < 100; i++) {
    x.f === i;
  }
}
foo({f:"three"});