1 files changed, 19 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/array-push-frozen-array.js b/js/src/jit-test/tests/ion/array-push-frozen-array.js
new file mode 100644
index 0000000000..4dfe32daae
--- /dev/null
+++ b/js/src/jit-test/tests/ion/array-push-frozen-array.js
@@ -0,0 +1,19 @@
+function maybeFreeze(arr, b) {
+    with(this) {}; // Don't inline this.
+    if (b) {
+        Object.freeze(arr);
+    }
+}
+function test() {
+    var arr = [];
+    for (var i = 0; i < 1800; i++) {
+        maybeFreeze(arr, i > 1500);
+        try {
+            arr.push(2);
+            assertEq(i <= 1500, true);
+        } catch(e) {
+            assertEq(e instanceof TypeError, true);
+        }
+    }
+}
+test();