1 files changed, 17 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug1812001.js b/js/src/jit-test/tests/ion/bug1812001.js
new file mode 100644
index 0000000000..936240718f
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug1812001.js
@@ -0,0 +1,17 @@
+var arr = [];
+for (var i = 0; i < 10; i++) {
+  arr.push({y: 1, x: 2, ["z" + i]: 3});
+}
+
+function bar(x) { with ({}) {} }
+
+function foo(obj) {
+  for (var key in obj) {
+    bar(obj[key]);
+  }
+}
+
+with ({}) {}
+for (var i = 0; i < 2000; i++) {
+  foo(arr[i % arr.length]);
+}