1 files changed, 13 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug783590.js b/js/src/jit-test/tests/ion/bug783590.js
new file mode 100644
index 0000000000..9d277e02c9
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug783590.js
@@ -0,0 +1,13 @@
+// |jit-test| error: TypeError
+
+var glob = this;
+var arr = [];
+Object.defineProperty(arr, 0, {
+  get: (function() {
+    glob.__proto__;
+  })
+});
+try {
+  arr.pop();
+} catch (e) {}
+arr.pop();