src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/bug714645.js

function testAddInconvertibleObjectAny() {
  var count = 0;
  function toString() {  }
  try {
    for (var i = 0; i < 100; i++)
        var q = count[count] && this ? testAddInconvertibleObjectAny : ++toString;
  }  catch (e)  {
    var dbg = count(toString);
  }
}
testAddInconvertibleObjectAny();