1 files changed, 16 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/auto-regress/bug592224.js b/js/src/jit-test/tests/auto-regress/bug592224.js
new file mode 100644
index 000000000..b39061e11
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug592224.js
@@ -0,0 +1,16 @@
+// |jit-test| error:TypeError
+
+// Binary: cache/js-dbg-64-e8ee411dca70-linux
+// Flags:
+//
+__defineGetter__("x", function () {});
+function z() {
+    "".replace(/s/, "");
+}
+z();
+(function () {
+    for (a = 0; a < 2; a++) {
+        __defineGetter__("", /a/);
+        for each(y in [__defineGetter__("x", function(){})]) {}
+    }
+}());