1 files changed, 58 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/bug827821-2.js b/js/src/jit-test/tests/ion/bug827821-2.js
new file mode 100644
index 0000000000..f1231320a4
--- /dev/null
+++ b/js/src/jit-test/tests/ion/bug827821-2.js
@@ -0,0 +1,58 @@
+s = newGlobal('');
+function f(code) {
+    try {
+        evalcx(code, s)
+    } catch (e) {}
+}
+f("\
+    options('strict');\
+    var x;\
+    y='';\
+    Object.preventExtensions(this);\
+    y=new String;\
+    y.toString=(function(){x=new Iterator});\
+");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("var z;");
+f("\
+    Iterator=String.prototype.toUpperCase;\
+    v=(function(){});\
+    Object.defineProperty(Function,0,({enumerable:x}));\
+")