x = 2147483647;
(x+10, false) ? [x % x] : [2 * x];
Crashes with -n -a -m, revision f3acaebac193, 32 bit.
We called linkExit() without a subsequent leave() for the negative zero helper in JSOP_MOD (any way to assert the correctness of these leave calls rather than get random corruption?).