1 files changed, 13 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/gc/bug-1851619.js b/js/src/jit-test/tests/gc/bug-1851619.js
new file mode 100644
index 0000000000..110bf302bd
--- /dev/null
+++ b/js/src/jit-test/tests/gc/bug-1851619.js
@@ -0,0 +1,13 @@
+//  |jit-test| slow; exitstatus: 3
+// Bug 1851619: Shouldn't crash.
+
+// This test triggers a stack overflow, then calls a finalization registry
+// cleanup callback that previously used data that had already been discarded.
+enableShellAllocationMetadataBuilder();
+var registry = new FinalizationRegistry(()=>{
+});
+registry.register({}, 1, {});
+function recurse(obj) {
+    recurse(obj);
+}
+recurse();