Sign in
webkit
/
WebKit
/
540d6b6f3e74031bf3bfd4bcf3dba6195c222b4d
/
.
/
JSTests
/
stress
/
slice-array-storage-with-holes.js
blob: 3d322fa417fd0de1b3cafebc69e732d3fb3c7533 [
file
] [
log
] [
blame
]
function
main
()
{
let arr
=
[
1
];
arr
.
length
=
0x100000
;
arr
.
splice
(
0
,
0x11
);
arr
.
length
=
0xfffffff0
;
arr
.
splice
(
0xfffffff0
,
0
,
1
);
}
main
();