1// Copyright 2014 the V8 project authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5// Flags: --allow-natives-syntax --enable-slow-asserts
6
7function f() {
8  var x = new Array(0);
9  x[-1] = -1;
10  Object.observe(x, function() { });
11}
12
13f();
14f();
15