1 files changed, 18 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug1196648.js b/js/src/jit-test/tests/ion/bug1196648.js
new file mode 100644
index 0000000000..315633a538
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug1196648.js
@@ -0,0 +1,18 @@
+h = function(m, foreign, n) {
+    "use asm";
+    var ff = foreign.ff;
+    function f(x) {
+        x = +x;
+        ff();
+    }
+    return f;
+}(0, {
+    ff: function() {
+        return {
+            e: String.prototype.substring
+        };
+    }
+}, 0);
+for (var k = 0; k < 999; k++) {
+    h();
+}