1 files changed, 27 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/arguments/recover-osr-arguments-oob.js b/js/src/jit-test/tests/arguments/recover-osr-arguments-oob.js
new file mode 100644
index 0000000000..72e322dd85
--- /dev/null
+++ b/js/src/jit-test/tests/arguments/recover-osr-arguments-oob.js
@@ -0,0 +1,27 @@
+setJitCompilerOption("baseline.warmup.trigger", 0);
+setJitCompilerOption("ion.warmup.trigger", 120);
+gczeal(0);
+with ({}) {}
+
+function bar(i) {
+    // |arguments| can be recovered, even if this is inlined into an OSR script.
+    assertRecoveredOnBailout(arguments, true);
+    return arguments[i & 1]|0;
+}
+
+function foo(n) {
+    // |arguments| for an OSR script can't be recovered.
+    assertRecoveredOnBailout(arguments, false);
+    var sum = 0;
+    for (var i = 0; i < n; i++) {
+        sum += bar(i);
+    }
+    trialInline();
+    return sum;
+}
+
+// Trigger trial-inlining of bar into foo.
+foo(110);
+
+// OSR-compile foo.
+assertEq(foo(1000), 249500);