From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- .../validate-arraytype-before-index-coercion.js | 40 ++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 js/src/tests/test262/built-ins/Atomics/compareExchange/validate-arraytype-before-index-coercion.js (limited to 'js/src/tests/test262/built-ins/Atomics/compareExchange/validate-arraytype-before-index-coercion.js') diff --git a/js/src/tests/test262/built-ins/Atomics/compareExchange/validate-arraytype-before-index-coercion.js b/js/src/tests/test262/built-ins/Atomics/compareExchange/validate-arraytype-before-index-coercion.js new file mode 100644 index 0000000000..5ddd207d24 --- /dev/null +++ b/js/src/tests/test262/built-ins/Atomics/compareExchange/validate-arraytype-before-index-coercion.js @@ -0,0 +1,40 @@ +// |reftest| skip-if(!this.hasOwnProperty('Atomics')) -- Atomics is not enabled unconditionally +// Copyright (C) 2019 André Bargull. All rights reserved. +// This code is governed by the BSD license found in the LICENSE file. + +/*--- +esid: sec-atomics.compareExchange +description: > + TypedArray type is validated before `index` argument is coerced. +info: | + 24.4.4 Atomics.compareExchange ( typedArray, index, expectedValue, replacementValue ) + 1. Let buffer be ? ValidateSharedIntegerTypedArray(typedArray). + ... + + 24.4.1.1 ValidateSharedIntegerTypedArray ( typedArray [ , onlyInt32 ] ) + ... + 4. Let typeName be typedArray.[[TypedArrayName]]. + 5. If onlyInt32 is true, then + a. If typeName is not "Int32Array", throw a TypeError exception. + 6. Else, + a. If typeName is not "Int8Array", "Uint8Array", "Int16Array", "Uint16Array", "Int32Array", + or "Uint32Array", throw a TypeError exception. + ... +includes: [testTypedArray.js] +features: [Atomics, TypedArray] +---*/ + +var index = { + valueOf() { + throw new Test262Error("index coerced"); + } +}; + +for (var badArrayType of nonAtomicsFriendlyTypedArrayConstructors) { + var typedArray = new badArrayType(new SharedArrayBuffer(8)); + assert.throws(TypeError, function() { + Atomics.compareExchange(typedArray, index, 0, 0); + }); +} + +reportCompare(0, 0); -- cgit v1.2.3