deleted file mode 100644
--- a/js/src/jit-test/tests/debug/bug1107525.js
+++ /dev/null
@@ -1,9 +0,0 @@
-// |jit-test| error: InternalError
-enableSPSProfiling();
-var g = newGlobal();
-g.parent = this;
-g.eval("new Debugger(parent).onExceptionUnwind = function () { hits++; };");
-function f() {
-    var x = f();
-}
-f();

--- a/js/src/jit/BaselineBailouts.cpp
+++ b/js/src/jit/BaselineBailouts.cpp
@@ -1096,25 +1096,18 @@ InitFromBailout(JSContext *cx, HandleScr
                     // no SPS entry will have been pushed.  Can be left alone.
                     //
                     // 3. If resuming into top-level code prologue, without ArgumentCheck,
                     // an SPS entry will have been pushed, and needs to be popped.
                     //
                     // 4. If resuming into top-level code main body, an SPS entry will
                     // have been pushed, and can be left alone.
                     //
-                    // 5. If resuming for propagating an exception for debug
-                    // mode, an SPS entry will have been pushed, and can be left
-                    // alone as we will resume into HandleException again in
-                    // Baseline.
-                    //
                     // Only need to handle case 3 here.
-                    if (!caller && bailoutKind != Bailout_ArgumentCheck &&
-                        !(excInfo && excInfo->propagatingIonExceptionForDebugMode()))
-                    {
+                    if (!caller && bailoutKind != Bailout_ArgumentCheck) {
                         JitSpew(JitSpew_BaselineBailouts,
                                 "      Popping SPS entry for outermost frame");
                         cx->runtime()->spsProfiler.exit(script, fun);
 
                         // Notify caller that the last SPS frame was popped, so not
                         // to do it again.
                         if (poppedLastSPSFrameOut)
                             *poppedLastSPSFrameOut = true;