diff --git a/test/annexB/built-ins/RegExp/prototype/Symbol.split/Symbol.match-getter-recompiles-source.js b/test/annexB/built-ins/RegExp/prototype/Symbol.split/Symbol.match-getter-recompiles-source.js
new file mode 100644
index 0000000000..228e79212b
--- /dev/null
+++ b/test/annexB/built-ins/RegExp/prototype/Symbol.split/Symbol.match-getter-recompiles-source.js
@@ -0,0 +1,35 @@
+// Copyright (C) 2017 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-regexp.prototype-@@split
+description: >
+  Side-effects in IsRegExp may recompile the regular expression.
+info: |
+  21.2.5.11 RegExp.prototype [ @@split ] ( string, limit )
+    ...
+    4. Let C be ? SpeciesConstructor(rx, %RegExp%).
+    ...
+    10. Let splitter be ? Construct(C, « rx, newFlags »).
+    ...
+
+  21.2.3.1 RegExp ( pattern, flags )
+    1. Let patternIsRegExp be ? IsRegExp(pattern).
+    ...
+
+features: [Symbol.match, Symbol.split]
+---*/
+
+var regExp = /a/;
+Object.defineProperty(regExp, Symbol.match, {
+  get: function() {
+    regExp.compile("b");
+  }
+});
+
+var result = regExp[Symbol.split]("abba");
+
+assert.sameValue(result.length, 3);
+assert.sameValue(result[0], "a");
+assert.sameValue(result[1], "");
+assert.sameValue(result[2], "a");
diff --git a/test/annexB/built-ins/RegExp/prototype/Symbol.split/toint32-limit-recompiles-source.js b/test/annexB/built-ins/RegExp/prototype/Symbol.split/toint32-limit-recompiles-source.js
new file mode 100644
index 0000000000..eed5a2a4af
--- /dev/null
+++ b/test/annexB/built-ins/RegExp/prototype/Symbol.split/toint32-limit-recompiles-source.js
@@ -0,0 +1,32 @@
+// Copyright (C) 2017 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-regexp.prototype-@@split
+description: >
+  Side-effects in ToUint32 may recompile the regular expression.
+info: |
+  21.2.5.11 RegExp.prototype [ @@split ] ( string, limit )
+    ...
+    10. Let splitter be ? Construct(C, « rx, newFlags »).
+    ...
+    13. If limit is undefined, let lim be 2^32-1; else let lim be ? ToUint32(limit).
+    ...
+
+features: [Symbol.split]
+---*/
+
+var regExp = /a/;
+var limit = {
+  valueOf: function() {
+    regExp.compile("b");
+    return -1;
+  }
+};
+
+var result = regExp[Symbol.split]("abba", limit);
+
+assert.sameValue(result.length, 3);
+assert.sameValue(result[0], "");
+assert.sameValue(result[1], "bb");
+assert.sameValue(result[2], "");