1 files changed, 39 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/auto-regress/bug661840.js b/js/src/jit-test/tests/auto-regress/bug661840.js
new file mode 100644
index 000000000..40326bc13
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug661840.js
@@ -0,0 +1,39 @@
+// |jit-test| error:ReferenceError
+
+// Binary: cache/js-dbg-32-11714be33655-linux
+// Flags: -m -n
+//
+function f(a) {}
+s = [{
+  s: [],
+  s: function(d, b) {},
+  t: function() {
+    try {} catch (e) {}
+  }
+}, {
+  t: "",
+  s: [],
+  s: function(d, b) {}
+}, {
+  t: "",
+  s: [],
+  s: function(d, b) {},
+  t: function() {}
+}, {
+  t: "",
+  x: "",
+  s: [],
+  g: function(b) {},
+  t: function(f) {}
+}, {
+  t: "",
+  s: [],
+  s: function() {}
+}];
+v = 0
+Function("gc(evalcx('lazy'))")();
+gczeal();
+gc();
+(function() {
+  x
+})()