diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/baseline/bug844464.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/baseline/bug844464.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,12 @@
+// |jit-test| error: TypeError
+Object = function () {};
+var p = Proxy.create({});
+Object.prototype.__proto__ = p;
+function newFunc(x) { new Function(x)(); };
+newFunc('\
+function f(v, value) {\
+    "failed: " + v + " " + value\
+}\
+f({}, false);\
+f(Object.prototype, false);\
+');