1 files changed, 19 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/gc/bug-1216607.js b/js/src/jit-test/tests/gc/bug-1216607.js
new file mode 100644
index 000000000..5187a47b8
--- /dev/null
+++ b/js/src/jit-test/tests/gc/bug-1216607.js
@@ -0,0 +1,19 @@
+if (!('oomTest' in this))
+    quit();
+
+enableSPSProfilingWithSlowAssertions();
+try {
+(function() {
+   while (n--) {
+   }
+})();
+} catch(exc1) {}
+function arrayProtoOutOfRange() {
+    function f(obj) {}
+    function test() {
+        for (var i = 0; i < 1000; i++)
+            var r = f(i % 2 ? a : b);
+    }
+    test();
+}
+oomTest(arrayProtoOutOfRange);