A MessageObject is a purely internal object to hold information about

test/cctest/test-api.cc

Index: test/cctest/test-api.cc
diff --git a/test/cctest/test-api.cc b/test/cctest/test-api.cc
index 5667e995bbbe7f1e7f3307738d8439ba425646cf..ee620678a762a68be349ac25517a9d74401f8dfb 100644
--- a/test/cctest/test-api.cc
+++ b/test/cctest/test-api.cc
@@ -2385,6 +2385,11 @@ TEST(APIThrowMessageOverwrittenToString) {
   Local<ObjectTemplate> templ = ObjectTemplate::New();
   templ->Set(v8_str("fail"), v8::FunctionTemplate::New(Fail));
   LocalContext context(NULL, templ);
+  CompileRun("asdf;");
+  CompileRun("var limit = {};"
+             "limit.valueOf = fail;"
+             "Error.stackTraceLimit = limit;");
+  CompileRun("asdf");
   CompileRun("Array.prototype.pop = fail;");
   CompileRun("Object.prototype.hasOwnProperty = fail;");
   CompileRun("Object.prototype.toString = function f() { return 'Yikes'; }");