1 // Copyright 2016 the V8 project authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 var custom_toString = function() { 6 var boom = custom_toString.caller; 7 return boom; 8 } 9 10 var object = {}; 11 object.toString = custom_toString; 12 13 try { Object.hasOwnProperty(object); } catch (e) {} 14