diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/basic/testOverRecursed5.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/basic/testOverRecursed5.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,13 @@
+JSON.__proto__[1] = new Uint8ClampedArray().buffer
+f = (function() {
+    function g(c) {
+        Object.freeze(c).__proto__ = c
+    }
+    for each(b in []) {
+        try {
+            g(b)
+        } catch (e) {}
+    }
+})
+f()
+f()