1 files changed, 16 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/basic/bug1122534.js b/js/src/jit-test/tests/basic/bug1122534.js
new file mode 100644
index 000000000..bdf1a0b57
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug1122534.js
@@ -0,0 +1,16 @@
+// |jit-test| error: TypeError
+
+function newFunc(x) { new Function(x)(); };
+newFunc("\
+function GetUnicodeValues(c) {\
+    u = new Array();\
+    if ((c >= 0x0100 && c < 0x0138) || (c > 0x1Bedb  && c < 0x0178))\
+        return;\
+    return u;\
+}\
+function Unicode(c) {\
+    u = GetUnicodeValues(c);\
+    this.upper = u[0];\
+}\
+for (var i = 0; i <= 0x017f; i++) { var U = new Unicode(i); }\
+");