Merging upstream version 127.0.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 36 insertions, 0 deletions

diff --git a/js/src/tests/test262/built-ins/DataView/prototype/setFloat16/index-check-before-value-conversion.js b/js/src/tests/test262/built-ins/DataView/prototype/setFloat16/index-check-before-value-conversion.js
new file mode 100644
index 0000000000..e1b2b18b35
--- /dev/null
+++ b/js/src/tests/test262/built-ins/DataView/prototype/setFloat16/index-check-before-value-conversion.js
@@ -0,0 +1,36 @@
+// |reftest| shell-option(--enable-float16array) skip-if(!this.hasOwnProperty('Float16Array')||!xulRuntime.shell) -- Float16Array is not enabled unconditionally, requires shell-options
+// Copyright (C) 2024 Kevin Gibbons. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-dataview.prototype.setfloat16
+description: >
+  RangeError exception for negative index is thrown before the value conversion.
+features: [Float16Array]
+---*/
+
+var dataView = new DataView(new ArrayBuffer(8), 0);
+
+var poisoned = {
+  valueOf: function() {
+    throw new Test262Error("valueOf called");
+  }
+};
+
+assert.throws(RangeError, function() {
+  dataView.setFloat16(-1.5, poisoned);
+}, "setFloat16(-1.5, poisoned)");
+
+assert.throws(RangeError, function() {
+  dataView.setFloat16(-1, poisoned);
+}, "setFloat16(-1, poisoned)");
+
+assert.throws(RangeError, function() {
+  dataView.setFloat16(-Infinity, poisoned);
+}, "setFloat16(-Infinity, poisoned)");
+
+assert.throws(RangeError, function() {
+  dataView.setFloat16(Infinity, poisoned);
+}, "setFloat16(Infinity, poisoned)");
+
+reportCompare(0, 0);