// Copyright 2015 the V8 project authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. function f() { return arguments; } var o = f(); o.length = -100; Array.prototype.slice.call(o);