diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/debug/Object-deleteProperty-error-01.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/debug/Object-deleteProperty-error-01.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,16 @@
+// Don't crash when a scripted proxy handler throws Error.prototype.
+
+var g = newGlobal();
+var dbg = Debugger(g);
+dbg.onDebuggerStatement = function (frame) {
+    try {
+        frame.arguments[0].deleteProperty("x");
+    } catch (exc) {
+        return;
+    }
+    throw new Error("deleteProperty should throw");
+};
+
+g.eval("function h(obj) { debugger; }");
+g.eval("h(Proxy.create({delete: function () { throw Error.prototype; }}));");
+