1 files changed, 27 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/basic/bug649939.js b/js/src/jit-test/tests/basic/bug649939.js
new file mode 100644
index 000000000..2f1b05473
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug649939.js
@@ -0,0 +1,27 @@
+// This was the actual bug
+assertRaises(StopIteration, function() {
+    Iterator.prototype.next();
+    Iterator.prototype.next();
+});
+
+// The error should have triggered here, but was masked by a latent bug
+assertRaises(StopIteration, function() {
+    Iterator.prototype.next();
+});
+
+// Found by fuzzing
+assertRaises(StopIteration, function() {
+    (new Iterator({})).__proto__.next();
+});
+
+
+function assertRaises(exc, callback) {
+    var caught = false;
+    try {
+        callback();
+    } catch (e) {
+        assertEq(e instanceof StopIteration, true);
+        caught = true;
+    }
+    assertEq(caught, true);
+}