1 files changed, 32 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/realms/promise-then.js b/js/src/jit-test/tests/realms/promise-then.js
new file mode 100644
index 0000000000..a12c2c6d82
--- /dev/null
+++ b/js/src/jit-test/tests/realms/promise-then.js
@@ -0,0 +1,32 @@
+load(libdir + "asserts.js");
+
+ignoreUnhandledRejections();
+
+const g = newGlobal({sameCompartmentAs: this});
+
+let resolve, reject;
+let promise = new Promise((resolveFn, rejectFn) => {
+    resolve = resolveFn;
+    reject = rejectFn;
+});
+
+// Set to a built-in Promise.prototype.then function, but from a different realm.
+promise.then = g.Promise.prototype.then;
+
+// Make SpeciesConstructor throw a TypeError exception.
+promise.constructor = {
+    [Symbol.species]: "not a constructor"
+};
+
+async function f(p) {
+    await p;
+}
+
+let error;
+f(promise).catch(e => { error = e; });
+
+resolve(promise);
+
+drainJobQueue();
+
+assertEq(error.constructor === g.TypeError, true);