diff -r 000000000000 -r 6474c204b198 js/src/jit-test/tests/jaeger/getelem-sanity-8.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/jit-test/tests/jaeger/getelem-sanity-8.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,13 @@
+
+// TI does not account for GETELEM accessing strings, so the GETELEM PIC must
+// update type constraints according to generated stubs.
+function foo(a, b) {
+  for (var j = 0; j < 5; j++)
+    a[b[j]] + " what";
+}
+var a = {a:"zero", b:"one", c:"two", d:"three", e:"four"};
+var b = ["a", "b", "c", "d", "e"];
+foo(a, b);
+foo(a, b);
+a.e = 4;
+foo(a, b);