1 files changed, 20 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug732847.js b/js/src/jit-test/tests/ion/bug732847.js
new file mode 100644
index 000000000..8c343fa6e
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug732847.js
@@ -0,0 +1,20 @@
+try{} catch (x) {}
+
+var callStack = [];
+function currentFunc() {
+    return callStack[0];
+}
+function reportFailure () {
+    var funcName = currentFunc();
+    // play with the result to cause a SEGV.
+    var prefix = (funcName) ? funcName : "";
+    // Use OSR to compile the function at the end of the first run.
+    for (var i=0; i < 50; i++) ;
+}
+
+callStack[0] = 'test';
+// Run and compile with a string as result of currentFunc.
+reportFailure();
+callStack[0] = undefined;
+// Use previously compiled code with the string assumption.
+reportFailure();