1 files changed, 33 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-7-7.js b/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-7-7.js
new file mode 100644
index 0000000000..4b97710d3b
--- /dev/null
+++ b/js/src/tests/test262/built-ins/Array/prototype/reduce/15.4.4.21-7-7.js
@@ -0,0 +1,33 @@
+// Copyright (c) 2012 Ecma International.  All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-array.prototype.reduce
+description: >
+    Array.prototype.reduce returns initialValue if 'length' is 0 and
+    initialValue is present (subclassed Array, length overridden with
+    obj w/o valueOf (toString))
+---*/
+
+foo.prototype = new Array(1, 2, 3);
+
+function foo() {}
+var f = new foo();
+
+var o = {
+  toString: function() {
+    return '0';
+  }
+};
+f.length = o;
+
+// objects inherit the default valueOf method of the Object object;
+// that simply returns the itself. Since the default valueOf() method
+// does not return a primitive value, ES next tries to convert the object
+// to a number by calling its toString() method and converting the
+// resulting string to a number.
+
+function cb() {}
+assert.sameValue(f.reduce(cb, 1), 1, 'f.reduce(cb,1)');
+
+reportCompare(0, 0);