diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/jaeger/bug615440.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/jaeger/bug615440.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,5 @@
+Array.prototype.__proto__ = null;
+for (var r = 0; r < 3; ++r) [][0] = 1;
+
+// Don't crash.
+