Sign in
webkit
/
WebKit
/
a36dd1c4bd8146169ac601fd378f4d14b5f88ac7
/
.
/
JSTests
/
stress
/
regress-187060.js
blob: e4a820cdb1a3616f17d39010b68eab2521ecd198 [
file
] [
log
] [
blame
]
// This test should not crash.
for
(
var
i
=
0
;
i
<
10000
;
i
++)
{
var
arr
=
[];
arr
.
constructor
=
{
[
Symbol
.
species
]:
function
()
{
return
[
'unmodifiable'
];
}
}
arr
.
concat
([
1
]);
}