test262/implementation-contributed/javascriptcore/stress/object-allocation-sinking-phase-needs-to-write-to-each-scope-offset.js

//@ runDefault("--forceEagerCompilation=1", "--useConcurrentJIT=0")

function foo(a, a) {
    function x() {
        eval();
    }
}
foo();
foo();
foo();
foo();
foo();
foo(0);