1 files changed, 21 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/debug/Environment-methods-toPrimitive.js b/js/src/jit-test/tests/debug/Environment-methods-toPrimitive.js
new file mode 100644
index 0000000000..106728901d
--- /dev/null
+++ b/js/src/jit-test/tests/debug/Environment-methods-toPrimitive.js
@@ -0,0 +1,21 @@
+// removeDebuggee can be called through ToPrimitive while converting the argument
+// passed to Debugger.Environment.{find,getVariable,setVariable} to string.
+
+var g = newGlobal({newCompartment: true});
+g.eval("function f() { debugger; }");
+var dbg = new Debugger();
+var oddball = {[Symbol.toPrimitive]: () => dbg.removeDebuggee(g)};
+
+for (var method of ["find", "getVariable", "setVariable"]) {
+  dbg.addDebuggee(g);
+  dbg.onDebuggerStatement = frame => {
+    var ex;
+    try {
+      frame.environment[method](oddball, oddball);
+    } catch (e) {
+      ex = e;
+    }
+    assertEq(ex.message, "Debugger.Environment is not a debuggee environment");
+  };
+  g.f();
+}