diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/ion/bug906035.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/ion/bug906035.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,9 @@
+// |jit-test| ion-eager
+function y() { return "foo,bar"; }
+function x() {
+  var z = y().split(',');
+  for (var i = 0; i < z.length; i++) {}
+}
+gczeal(2);
+Object.prototype.length = function () {};
+x();