diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/auto-regress/bug643670.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/auto-regress/bug643670.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,19 @@
+// |jit-test| error:ReferenceError
+
+// Binary: cache/js-dbg-32-55f463c562d4-linux
+// Flags: -m -n -a
+//
+o3 = evalcx("split")
+function f3(o) {
+    try {
+        new o
+    } catch(e) {}
+}
+function f16(o) {
+    Object.getOwnPropertyNames(o);
+    o.__defineGetter__("prototype", function() {})
+}
+for (;;) {
+    new f3(o3);
+    f16(o3)
+}