diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/closures/bug540136.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/closures/bug540136.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,17 @@
+// |jit-test| error: TypeError
+
+(eval("\
+ (function () {\
+   for (var[x] = function(){} in \
+     (function m(a) {\
+       if (a < 1) {\
+         x;\
+         return\
+       }\
+       return m(a - 1) + m(a - 2)\
+     })(7)\
+     (eval(\"\"))\
+   )\
+   ([])\
+ })\
+"))()