diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/basic/bug528116.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/basic/bug528116.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,8 @@
+(function() {
+    var x = [null, [], null];
+    for (var i = 0; i != x.length; ++i) {
+        eval("for (var b = 0; b < 2; ++b);", x[i]);
+    }
+})();
+
+// Just test that we don't crash.