Bug demonstration: lookup failure in case expression in native js

src/collection.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 var $getHash;
 var $getExistingHash;
 var $mapFromArray;
 var $setFromArray;
 
 (function(global, utils) {
@@ skipping 360 matching lines @@
   var chainEntry = ORDERED_HASH_TABLE_BUCKET_AT(table, bucket);
   ORDERED_HASH_TABLE_SET_BUCKET_AT(table, bucket, entry);
   ORDERED_HASH_TABLE_SET_ELEMENT_COUNT(table, nof + 1);
   FIXED_ARRAY_SET(table, index, key);
   FIXED_ARRAY_SET(table, index + 1, value);
   FIXED_ARRAY_SET(table, index + 2, chainEntry);
   return this;
 }
 
 
+var GlobalFoo = 5;
+
+
 function MapHas(key) {
+  switch (key) {
+    case GlobalFoo:
+      throw 'Adam was here';
+  }
+
   if (!IS_MAP(this)) {
     throw MakeTypeError(kIncompatibleMethodReceiver,
                         'Map.prototype.has', this);
   }
   var table = %_JSCollectionGetTable(this);
   var numBuckets = ORDERED_HASH_TABLE_BUCKET_COUNT(table);
   var hash = GetHash(key);
   return MapFindEntry(table, numBuckets, key, hash) !== NOT_FOUND;
 }
 
@@ skipping 104 matching lines @@
 $setFromArray = function(array) {
   var set = new GlobalSet;
   var length = array.length;
   for (var i = 0; i < length; ++i) {
     %_CallFunction(set, array[i], SetAdd);
   }
   return set;
 };
 
 })