diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/auto-regress/bug609287.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/auto-regress/bug609287.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,19 @@
+// |jit-test| error:TypeError
+
+// Binary: cache/js-dbg-32-7ec0a71652a6-linux
+// Flags:
+//
+f = eval("\
+  (function() {\
+    __proto__ = \
+    Proxy.createFunction((\
+    function() {\
+      return {\
+        has: ArrayBuffer,\
+      }\
+    })\
+    (\"\"), \
+    JSON.parse\
+    )\
+  })\
+")()