Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 35 insertions, 0 deletions

diff --git a/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-5-7.js b/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-5-7.js
new file mode 100644
index 0000000000..b6777f6da2
--- /dev/null
+++ b/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-5-7.js
@@ -0,0 +1,35 @@
+// Copyright (c) 2012 Ecma International.  All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-array.prototype.reduce
+description: >
+    Array.prototype.reduce throws TypeError if 'length' is 0
+    (subclassed Array, length overridden with obj w/o valueOf
+    (toString)), no initVal
+---*/
+
+foo.prototype = new Array(1, 2, 3);
+
+function foo() {}
+var f = new foo();
+
+var o = {
+  toString: function() {
+    return '0';
+  }
+};
+f.length = o;
+
+// objects inherit the default valueOf method of the Object object;
+// that simply returns the itself. Since the default valueOf() method
+// does not return a primitive value, ES next tries to convert the object
+// to a number by calling its toString() method and converting the
+// resulting string to a number.
+
+function cb() {}
+assert.throws(TypeError, function() {
+  f.reduce(cb);
+});
+
+reportCompare(0, 0);