src/third_party/mozjs-45/js/src/jit-test/tests/jaeger/loops/bug651155.js

ForIn_2();
function ForIn_2( object ) {
  PropertyArray=new Array;
  var PropertyArray = 'Do not assert: !cx->throwing';
  for ( i in object ) PropertyArray.length-1;
}