1 files changed, 48 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/DataView/custom-proto-access-throws-sab.js b/js/src/tests/test262/built-ins/DataView/custom-proto-access-throws-sab.js
new file mode 100644
index 0000000000..9fc65a863f
--- /dev/null
+++ b/js/src/tests/test262/built-ins/DataView/custom-proto-access-throws-sab.js
@@ -0,0 +1,48 @@
+// |reftest| skip-if(!this.hasOwnProperty('SharedArrayBuffer')) -- SharedArrayBuffer is not enabled unconditionally
+// Copyright (C) 2016 the V8 project authors. All rights reserved.
+// Copyright (C) 2017 Mozilla Corporation. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-dataview-buffer-byteoffset-bytelength
+description: >
+  Return abrupt from newTarget's custom constructor prototype
+info: |
+  24.2.2.1 DataView (buffer, byteOffset, byteLength )
+
+  ...
+  12. Let O be ? OrdinaryCreateFromConstructor(NewTarget, "%DataViewPrototype%",
+  « [[DataView]], [[ViewedArrayBuffer]], [[ByteLength]], [[ByteOffset]] »).
+  ...
+  17. Return O.
+
+  9.1.13 OrdinaryCreateFromConstructor ( constructor, intrinsicDefaultProto [ ,
+  internalSlotsList ] )
+
+  ...
+  2. Let proto be ? GetPrototypeFromConstructor(constructor,
+  intrinsicDefaultProto).
+  3. Return ObjectCreate(proto, internalSlotsList).
+
+  9.1.15 GetPrototypeFromConstructor ( constructor, intrinsicDefaultProto )
+
+  ...
+  3. Let proto be ? Get(constructor, "prototype").
+  ...
+features: [Reflect.construct, SharedArrayBuffer]
+---*/
+
+var buffer = new SharedArrayBuffer(8);
+
+var newTarget = function() {}.bind(null);
+Object.defineProperty(newTarget, "prototype", {
+  get() {
+    throw new Test262Error();
+  }
+});
+
+assert.throws(Test262Error, function() {
+  Reflect.construct(DataView, [buffer, 0], newTarget);
+});
+
+reportCompare(0, 0);