1 files changed, 19 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/auto-regress/bug653395.js b/js/src/jit-test/tests/auto-regress/bug653395.js
new file mode 100644
index 000000000..8d5ef3316
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug653395.js
@@ -0,0 +1,19 @@
+// |jit-test| error:TypeError
+
+// Binary: cache/js-dbg-64-09cce9915b80-linux
+// Flags: -m -n
+//
+try {
+    (function () {
+        __proto__ = new Uint32Array()
+    }())
+} catch (e) {}(function () {
+})()
+eval("\
+function testAtomize() {\
+    x = {};\
+    for (var i = false ; i < 65536; ++i)\
+        x[String.fromCharCode(i)] = 1;\
+}\
+new testAtomize()(testAtomize(), 65536);\
+");