1 files changed, 41 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/RegExp/prototype/Symbol.replace/result-coerce-capture-err.js b/js/src/tests/test262/built-ins/RegExp/prototype/Symbol.replace/result-coerce-capture-err.js
new file mode 100644
index 0000000000..e03a9a4300
--- /dev/null
+++ b/js/src/tests/test262/built-ins/RegExp/prototype/Symbol.replace/result-coerce-capture-err.js
@@ -0,0 +1,41 @@
+// Copyright (C) 2015 the V8 project authors. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+description: >
+    Behavior when error is thrown while type coercing `1` property of result
+es6id: 21.2.5.8
+info: |
+    [...]
+    13. Repeat, while done is false
+        a. Let result be RegExpExec(rx, S).
+        [...]
+    16. Repeat, for each result in results,
+        [...]
+        l. Repeat while n ≤ nCaptures
+           i. Let capN be Get(result, ToString(n)).
+           ii. ReturnIfAbrupt(capN).
+           iii. If capN is not undefined, then
+                1. Let capN be ToString(capN).
+                2. ReturnIfAbrupt(capN).
+features: [Symbol.replace]
+---*/
+
+var r = /./;
+var uncoercibleValue = {
+  length: 2,
+  1: {
+    toString: function() {
+      throw new Test262Error();
+    }
+  }
+};
+r.exec = function() {
+  return uncoercibleValue;
+};
+
+assert.throws(Test262Error, function() {
+  r[Symbol.replace]('a', 'b');
+});
+
+reportCompare(0, 0);