1 files changed, 29 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/basic/bug610592.js b/js/src/jit-test/tests/basic/bug610592.js
new file mode 100644
index 0000000000..da825d2843
--- /dev/null
+++ b/js/src/jit-test/tests/basic/bug610592.js
@@ -0,0 +1,29 @@
+
+/* Don't confuse JIT code by making slow arrays that use inline slots inconsistently. */
+
+function foo(a)
+{
+  assertEq(a.x, 5);
+}
+
+function bar()
+{
+  for (var i = 0; i < 50; i++) {
+    var a = [];
+    a[i] = 0;
+    delete a[i];
+    a.x = 5;
+    foo(a);
+  }
+
+  var b = [1,,2,,3,,4,,5];
+  assertEq(b.toString(), "1,,2,,3,,4,,5");
+  b.x = 0;
+  assertEq(b.toString(), "1,,2,,3,,4,,5");
+  delete b.x;
+  delete b[8];
+  delete b[6];
+  delete b[4];
+  assertEq(b.toString(), "1,,2,,,,,,");
+}
+bar();