1 files changed, 18 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/ion/result-type-mutated.js b/js/src/jit-test/tests/ion/result-type-mutated.js
new file mode 100644
index 0000000000..601a6d6176
--- /dev/null
+++ b/js/src/jit-test/tests/ion/result-type-mutated.js
@@ -0,0 +1,18 @@
+// jitcode which uses objects of one type might not be invalidated when that
+// object changes type, if the object isn't accessed in any way.
+
+function foo(x) {
+    return x.f;
+}
+
+function bar() {
+    with({}){}
+
+    var a = {};
+    var b = { f: a };
+    foo(b);
+    a.__proto__ = null;
+    foo(b);
+}
+
+bar();