diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/auto-regress/bug488015.js --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/js/src/jit-test/tests/auto-regress/bug488015.js Wed Dec 31 06:09:35 2014 +0100 @@ -0,0 +1,29 @@ +// Binary: cache/js-dbg-64-e1257570fef8-linux +// Flags: +// +var a = []; +function addEventListener(e, f, g) +{ + a.push(f); +} +function setTimeout(f, t) +{ + a.push(f); +} +var b; +this.document = {}; +function e(w) { + addEventListener("mousedown", d, true); + function d() { + var d; + w.setTimeout(function() { + b(d); + }, 0); + } + function b(d){ + w.document; /* Crash Here!! */ + } +} +e(this); +a[0](); +a[1]();