1 files changed, 10 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/basic/json-stringify-large-length.js b/js/src/jit-test/tests/basic/json-stringify-large-length.js
new file mode 100644
index 0000000000..d362d1c763
--- /dev/null
+++ b/js/src/jit-test/tests/basic/json-stringify-large-length.js
@@ -0,0 +1,10 @@
+// |jit-test| error:InternalError
+var arr = [1, 2, 3];
+var proxy = new Proxy(arr, {
+    get(target, prop) {
+        if (prop === "length") {
+            return Math.pow(2, 33);
+        }
+    }
+});
+JSON.stringify(proxy);