1 // Copyright 2014 the V8 project authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 // Flags: --allow-natives-syntax --enable-slow-asserts 6 7 function f() { 8 var x = new Array(0); 9 x[-1] = -1; 10 Object.observe(x, function() { }); 11 } 12 13 f(); 14 f(); 15
