1 files changed, 13 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/auto-regress/bug1466626-3.js b/js/src/jit-test/tests/auto-regress/bug1466626-3.js
new file mode 100644
index 0000000000..bffecfce73
--- /dev/null
+++ b/js/src/jit-test/tests/auto-regress/bug1466626-3.js
@@ -0,0 +1,13 @@
+// |jit-test| skip-if: !('oomTest' in this)
+
+var g = newGlobal();
+
+var i = 0;
+oomTest(function() {
+    var s = String.fromCharCode((i++) & 0xffff);
+    var r = "";
+    for (var j = 0; j < 1000; ++j) {
+        r = s + r;
+    }
+    g.String.prototype.toString.call(r);
+});