Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 31 insertions, 0 deletions

diff --git a/js/src/tests/test262/built-ins/DataView/excessive-byteoffset-throws-sab.js b/js/src/tests/test262/built-ins/DataView/excessive-byteoffset-throws-sab.js
new file mode 100644
index 0000000000..9cba155986
--- /dev/null
+++ b/js/src/tests/test262/built-ins/DataView/excessive-byteoffset-throws-sab.js
@@ -0,0 +1,31 @@
+// |reftest| skip-if(!this.hasOwnProperty('SharedArrayBuffer')) -- SharedArrayBuffer is not enabled unconditionally
+// Copyright (C) 2016 the V8 project authors. All rights reserved.
+// Copyright (C) 2017 Mozilla Corporation. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-dataview-buffer-byteoffset-bytelength
+description: >
+  Throws a RangeError if offset > bufferByteLength
+info: |
+  24.2.2.1 DataView (buffer, byteOffset, byteLength )
+
+  ...
+  8. Let bufferByteLength be the value of buffer's [[ArrayBufferByteLength]]
+  internal slot.
+  9. If offset > bufferByteLength, throw a RangeError exception.
+  ...
+features: [SharedArrayBuffer]
+---*/
+
+var ab = new SharedArrayBuffer(1);
+
+assert.throws(RangeError, function() {
+  new DataView(ab, 2);
+}, "2");
+
+assert.throws(RangeError, function() {
+  new DataView(ab, Infinity);
+}, "Infinity");
+
+reportCompare(0, 0);