Created attachment 630364 [details]
Testcase for shell
The attached testcase asserts on ionmonkey revision 2062cc1c4b06 (run with --ion -n -m --ion-eager).
This is specifically a bug in how gczeal(4) interacts with IonMonkey, so taking s-s off.
Created attachment 637255 [details] [diff] [review]
*** Bug 765487 has been marked as a duplicate of this bug. ***
A testcase for this bug was automatically identified at js/src/jit-test/tests/ion/bug761854.js.