1 files changed, 17 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/gc/bug-1498177.js b/js/src/jit-test/tests/gc/bug-1498177.js
new file mode 100644
index 0000000000..d423d47dcb
--- /dev/null
+++ b/js/src/jit-test/tests/gc/bug-1498177.js
@@ -0,0 +1,17 @@
+
+let a, b;
+for (i=0; i < 300000; i++) {
+    let c = { a: a, b: b };
+    a = b;
+    b = c;
+}
+
+gc();
+
+// GCRuntime::setLargeHeapSizeMinBytes will change the low value to be one
+// byte lower than the high value (if necessary).  But this blew up later
+// when the values were mistakingly cast to float then compared, rather than
+// kept as size_t.
+gcparam('largeHeapSizeMin', 99);
+
+