1 files changed, 7 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug1518377-1.js b/js/src/jit-test/tests/ion/bug1518377-1.js
new file mode 100644
index 0000000000..fc2869efc0
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug1518377-1.js
@@ -0,0 +1,7 @@
+Object.prototype[Symbol.toPrimitive] = inIon;
+which = function() {};
+for (var i = 0; i < 10; ++i) {
+    s = which[which[which]];
+    a = which;
+    a += s + "";
+}