1 files changed, 29 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/backup-point-bug1315634.js b/js/src/jit-test/tests/backup-point-bug1315634.js
new file mode 100644
index 0000000000..337bd5b40c
--- /dev/null
+++ b/js/src/jit-test/tests/backup-point-bug1315634.js
@@ -0,0 +1,29 @@
+setJitCompilerOption('ion.forceinlineCaches', 1);
+function g(f, x) {
+    for (var j = 0; j < 3; ++j)
+        for (var k = 0; k < 21; ++k)
+            try {
+                f(x[k]);
+            } catch (e) {}
+}
+a0 = y = [];
+function f2() {
+    f1()
+};
+function f1() {
+    switch (abs(abs(3187503207)(134217728) | 0) | 0) {
+        case -2:
+            this.y.splice(NaN, 2, x({}) = 4277)
+    }
+    return
+    4006901336 | 0
+}
+g(f1, []);
+g(f2, []);
+f1 = (function() {
+    function f() {
+        a0.splice(NaN, 0);
+    }
+    return f;
+})();
+g(f2, []);