rem: delete a[N - 1]; var tmp = []; tmp[N - 2] = 1; 
add: delete a[N - 1]; var tmp = []; tmp[N - 2] = 1; 
context: function test(){  enterFunc ('test');  printBugNumber (bug);  printStatus (summary);  var N = 0xFFFFFFFF;  var a = [];    a[N - 1] = 0;  var expected = "GETTER RESULT";  a.__defineGetter__(N - 1, function() {      delete a[N - 1];      var tmp = [];      tmp[N - 2] = 1;      if (typeof gc == 'function')        gc();      for (var i = 0; i != 50000; ++i) {        var tmp = 1 / 3;        tmp /= 10;      }      for (var i = 0; i != 1000; ++i) {        // Make string with 11 characters that would take        // (11 + 1) * 2 bytes or sizeof(JSAtom) so eventually        // malloc will ovewrite just freed atoms.        var tmp2 = Array(12).join(' ');      }      return expected;    });  actual = a.pop();  reportCompare(expect, actual, summary);  print('Done');  exitFunc ('test');}
meta: 10520	/local1/tlutelli/issta_data/temp/all_js/javascript/2007_temp/2007/10520/0b675418ba636127763e94e614e62364d6caa659/regress-341956-02.js/clean/js/tests/js1_5/extensions/regress-341956-02.js