diff -r 000000000000 -r 6474c204b198 js/src/tests/js1_8_5/regress/regress-600137.js
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/js/src/tests/js1_8_5/regress/regress-600137.js	Wed Dec 31 06:09:35 2014 +0100
@@ -0,0 +1,22 @@
+/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
+/*
+ * Any copyright is dedicated to the Public Domain.
+ * http://creativecommons.org/licenses/publicdomain/
+ */
+
+if (typeof evalcx == 'function') {
+    var src = 'try {\n' +
+    '    for (var [e] = /x/ in d) {\n' +
+    '        (function () {});\n' +
+    '    }\n' +
+    '} catch (e) {}\n' +
+    'try {\n' +
+    '    let(x = Object.freeze(this, /x/))\n' +
+    '    e = {}.toString\n' +
+    '    function y() {}\n' +
+    '} catch (e) {}';
+
+    evalcx(src);
+}
+
+reportCompare(0, 0, "don't crash");