Home | History | Annotate | Download | only in regress
      1 // Copyright 2016 the V8 project authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style license that can be
      3 // found in the LICENSE file.
      4 
      5 var custom_toString = function() {
      6   var boom = custom_toString.caller;
      7   return boom;
      8 }
      9 
     10 var object = {};
     11 object.toString = custom_toString;
     12 
     13 try { Object.hasOwnProperty(object); } catch (e) {}
     14