diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/closures/bug540131-2.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/closures/bug540131-2.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,13 @@
+// |jit-test| error: TypeError
+(function() {
+  for (let z in [true]) {
+    (new(eval("for(l in[0,0,0,0]){}"))
+     (((function f(a, b) {
+      if (a.length == b) {
+        return (z)
+      }
+      f(a, b + 1)
+    })([,,], 0)), []))
+  }
+})()
+