JSTests/stress/number-prototype-to-string-exception.js

function assert(a) {
    if (!a)
        throw new Error("Bad assertion");
}

let o = {
    valueOf: () => {
        throw new Error("Bad");
        return 2;
    }
}

let a = 2;
try {
    a.toString(o);
    assert(false);
} catch (e) {
    assert(e.message == "Bad");
}