diff -r 000000000000 -r 6474c204b198 js/src/tests/js1_8_5/regress/regress-576847.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/tests/js1_8_5/regress/regress-576847.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,19 @@
+/*
+ * Any copyright is dedicated to the Public Domain.
+ * http://creativecommons.org/licenses/publicdomain/
+ */
+
+/* Don't crash. */
+try {
+    eval("function f(){}(((f)for(x in function(){}))())");
+    var threwTypeError = false;
+} catch (x) {
+    var threwTypeError = x instanceof TypeError;
+}
+assertEq(threwTypeError, true);
+
+/* Properly bind f. */
+assertEq(eval("function f() {}; var i = (f for (f in [1])); uneval([n for (n in i)])"),
+         '["0"]');
+
+reportCompare(true, true);