diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/basic/regexp-test-direct-bug-694752.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/basic/regexp-test-direct-bug-694752.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,15 @@
+function whoo() {
+    // Cause mjit to use the script's RegExpObject directly when it compiles this function.
+    assertEq(/foo.*baz/.test('foobarbaz'), true);
+}
+
+var orig_test = RegExp.prototype.test
+for (var i = 0; i < 50; ++i)
+    whoo();
+eval('RegExp.prototype.test = function(str) { return orig_test.call(this, str) }')
+for (var i = 0; i < 50; ++i)
+    whoo();
+RegExp.prototype.test = orig_test;
+gc();
+whoo();
+