Sign in
webkit
/
WebKit
/
bad337c80c8c8227def180723935094397432148
/
.
/
JSTests
/
stress
/
slice-array-storage-with-holes.js
blob: 3d322fa417fd0de1b3cafebc69e732d3fb3c7533 [
file
] [
log
] [
blame
]
function
main
()
{
let arr
=
[
1
];
arr
.
length
=
0x100000
;
arr
.
splice
(
0
,
0x11
);
arr
.
length
=
0xfffffff0
;
arr
.
splice
(
0xfffffff0
,
0
,
1
);
}
main
();