1 files changed, 58 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/DataView/excessive-bytelength-throws-sab.js b/js/src/tests/test262/built-ins/DataView/excessive-bytelength-throws-sab.js
new file mode 100644
index 0000000000..02a82ac4ff
--- /dev/null
+++ b/js/src/tests/test262/built-ins/DataView/excessive-bytelength-throws-sab.js
@@ -0,0 +1,58 @@
+// |reftest| skip-if(!this.hasOwnProperty('SharedArrayBuffer')) -- SharedArrayBuffer is not enabled unconditionally
+// Copyright (C) 2016 the V8 project authors. All rights reserved.
+// Copyright (C) 2017 Mozilla Corporation. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-dataview-buffer-byteoffset-bytelength
+description: >
+  Throws RangeError if offset + viewByteLength > bufferByteLength
+info: |
+  24.2.2.1 DataView (buffer, byteOffset, byteLength )
+
+  ...
+  10. If byteLength is undefined, then
+    ...
+  11. Else,
+    a. Let viewByteLength be ? ToLength(byteLength).
+    b. If offset+viewByteLength > bufferByteLength, throw a RangeError
+    exception.
+  ...
+features: [SharedArrayBuffer]
+---*/
+
+var buffer = new SharedArrayBuffer(3);
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 0, 4);
+}, "offset: 0, length 4");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 1, 3);
+}, "offset: 1, length: 3");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 2, 2);
+}, "offset: 2, length: 2");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 3, 1);
+}, "offset: 3, length: 1");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 4, 0);
+}, "offset: 4, length: 0");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 4, -1);
+}, "offset: 4, length: -1");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 4, -Infinity);
+}, "offset: 4, length: -Infinity");
+
+assert.throws(RangeError, function() {
+  new DataView(buffer, 0, Infinity);
+}, "offset: 0, length: Infinity");
+
+reportCompare(0, 0);