1 files changed, 19 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/auto-regress/bug643670.js b/js/src/jit-test/tests/auto-regress/bug643670.js
new file mode 100644
index 000000000..701490717
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug643670.js
@@ -0,0 +1,19 @@
+// |jit-test| error:ReferenceError
+
+// Binary: cache/js-dbg-32-55f463c562d4-linux
+// Flags: -m -n -a
+//
+o3 = evalcx("split")
+function f3(o) {
+    try {
+        new o
+    } catch(e) {}
+}
+function f16(o) {
+    Object.getOwnPropertyNames(o);
+    o.__defineGetter__("prototype", function() {})
+}
+for (;;) {
+    new f3(o3);
+    f16(o3)
+}