1 files changed, 27 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/asm.js/neuter-during-arguments-coercion.js b/js/src/jit-test/tests/asm.js/neuter-during-arguments-coercion.js
new file mode 100644
index 000000000..bfe8913e7
--- /dev/null
+++ b/js/src/jit-test/tests/asm.js/neuter-during-arguments-coercion.js
@@ -0,0 +1,27 @@
+load(libdir + "asm.js");
+
+function f(stdlib, foreign, buffer)
+{
+  "use asm";
+  var i32 = new stdlib.Int32Array(buffer);
+  function set(v)
+  {
+    v=v|0;
+    i32[5] = v;
+  }
+  return set;
+}
+if (isAsmJSCompilationAvailable())
+  assertEq(isAsmJSModule(f), true);
+
+var i32 = new Int32Array(65536);
+var buffer = i32.buffer;
+var set = f(this, null, buffer);
+if (isAsmJSCompilationAvailable())
+  assertEq(isAsmJSFunction(set), true);
+
+try
+{
+  set({ valueOf() { detachArrayBuffer(buffer); return 17; } });
+}
+catch (e) { /* if an exception thrown, swallow */ }