gecko-dev/dom/base/crashtests/642022-1.html

<!DOCTYPE html>
<script>
InstallTrigger.constructor.create(window).setTimeout(Array, 0);
</script>