| Index: test/mjsunit/regress/regress-612412.js
 | 
| diff --git a/test/mjsunit/regress/regress-612412.js b/test/mjsunit/regress/regress-612412.js
 | 
| new file mode 100644
 | 
| index 0000000000000000000000000000000000000000..3debe66f32bab5aef682a7295fddee9773bddfc6
 | 
| --- /dev/null
 | 
| +++ b/test/mjsunit/regress/regress-612412.js
 | 
| @@ -0,0 +1,20 @@
 | 
| +// Copyright 2015 the V8 project authors. All rights reserved.
 | 
| +// Use of this source code is governed by a BSD-style license that can be
 | 
| +// found in the LICENSE file.
 | 
| +
 | 
| +// Flags: --allow-natives-syntax
 | 
| +
 | 
| +function counter() { return {x: 0} || this }
 | 
| +
 | 
| +var f = (function() {
 | 
| +  "use asm";
 | 
| +  return function g(c1, c2) {
 | 
| +    for (var x = 0 ; x < 10; ++x) {
 | 
| +      if (x == 5) %OptimizeOsr();
 | 
| +      c1();
 | 
| +    }
 | 
| +  }
 | 
| +})();
 | 
| +
 | 
| +g = (function() { f((Array), counter()); });
 | 
| +g();
 | 
| 
 |