Bug 1471361: Add test case r=tcampbell

--HG--
extra : rebase_source : 4e020f3403fe955a3a7d5094ab680d713b5f7a8d

js/src/jit-test/tests/cacheir/bug1471361.js

@@ -0,0 +1,13 @@
+// This is a fuzzer-found crash inducing test.
+// Pass is simply not crashing.
+(function () {
+    f = function(y) {
+        ~+y;
+    }
+    x = [new Number];
+    for (var j = 0; j < 3; ++j) {
+        for (var k = 0; k < 3; ++k) {
+            f(x[k]);
+        }
+    }
+})();