LayoutTests/js/script-tests/dfg-array-pop-value-clearing.js

description(
"Tests that array popping properly cleans up the popped element."
);

function foo(a) {
    var x = a.pop();
    a[a.length + 1] = 42;
    return [x, a.pop(), a.pop()];
}

dfgShouldBe(foo, "foo([1, 2])", "[2,42,,]");