Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 49 insertions, 0 deletions

diff --git a/js/src/tests/test262/built-ins/Array/prototype/pop/set-length-array-is-frozen.js b/js/src/tests/test262/built-ins/Array/prototype/pop/set-length-array-is-frozen.js
new file mode 100644
index 0000000000..d083e0eb19
--- /dev/null
+++ b/js/src/tests/test262/built-ins/Array/prototype/pop/set-length-array-is-frozen.js
@@ -0,0 +1,49 @@
+// Copyright (C) 2022 Apple Inc. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+/*---
+esid: sec-array.prototype.pop
+description: >
+  A TypeError is thrown when "length" is [[Set]] on a frozen array.
+info: |
+  Array.prototype.pop ( )
+
+  [...]
+  4. Else,
+    a. Assert: len > 0.
+    b. Let newLen be 𝔽(len - 1).
+    c. Let index be ! ToString(newLen).
+    d. Let element be ? Get(O, index).
+    e. Perform ? DeletePropertyOrThrow(O, index).
+    f. Perform ? Set(O, "length", newLen, true).
+
+  OrdinarySetWithOwnDescriptor ( O, P, V, Receiver, ownDesc )
+
+  [...]
+  2. If IsDataDescriptor(ownDesc) is true, then
+    a. If ownDesc.[[Writable]] is false, return false.
+
+  Set ( O, P, V, Throw )
+
+  [...]
+  1. Let success be ? O.[[Set]](P, V, O).
+  2. If success is false and Throw is true, throw a TypeError exception.
+---*/
+
+var array = new Array(1);
+var arrayPrototypeGet0Calls = 0;
+
+Object.defineProperty(Array.prototype, "0", {
+  get() {
+    Object.freeze(array);
+    arrayPrototypeGet0Calls++;
+  },
+});
+
+assert.throws(TypeError, function() {
+  array.pop();
+});
+
+assert.sameValue(array.length, 1);
+assert.sameValue(arrayPrototypeGet0Calls, 1);
+
+reportCompare(0, 0);