1 files changed, 17 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/cacheir/bug1502709.js b/js/src/jit-test/tests/cacheir/bug1502709.js
new file mode 100644
index 0000000000..535443050d
--- /dev/null
+++ b/js/src/jit-test/tests/cacheir/bug1502709.js
@@ -0,0 +1,17 @@
+
+setJitCompilerOption("baseline.warmup.trigger", 0);
+main();
+
+function main() {
+    try {
+        x = [];
+        Object.defineProperty(x, 1, {});
+        y = [];
+        Object.defineProperty(y, 1, {});
+        y.__proto__ = null;
+        Array.prototype.sort.apply(x, [function() {}]);
+    } catch (e) {}
+    try {
+        Array.prototype.sort.apply(y, [function() {}]);
+    } catch (e) {}
+}