The mentioned test asserts on mozilla-central revision 4de07a341aab (options -m -n -a) with:
Assertion failure: [infer failure] Missing type pushed 1: [0x7f9f54b006d0], at js/src/jsinfer.cpp:349
*** Bug 717716 has been marked as a duplicate of this bug. ***
Created attachment 588217 [details] [diff] [review]
Bug 712714 erroneously removed inference type propagation for the second value pushed by JSOP_CALLXMLNAME, though this op still pushes two values.