1 files changed, 15 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug1620215.js b/js/src/jit-test/tests/ion/bug1620215.js
new file mode 100644
index 0000000000..70b95ca630
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug1620215.js
@@ -0,0 +1,15 @@
+function test(x) {
+    for (var i = 0; i < 10; ++i) {
+        // Create an IC specialized for lazy arguments when Baseline runs.
+        arguments[0];
+        // De-optimize lazy arguments by accessing an out-of-bounds argument.
+        arguments[10];
+
+        // Overwrite |arguments| to get a Value type.
+        arguments = 0;
+
+        for (var j = 0; j < 1500; j++) {}
+        return;
+    }
+}
+test(1);