js/src/tests/test262/built-ins/Array/prototype/concat/Array.prototype.concat_array-like-length-to-string-throws.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

// Copyright (c) 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

/*---
esid: sec-array.prototype.concat
description: Array.prototype.concat array like length to string throws
features: [Symbol.isConcatSpreadable]
---*/
var objWithPoisonedLengthToString = {
  "length": {
    toString: function() {
      throw new Test262Error();
    },
    valueOf: null
  },
  "1": "A",
  "3": "B",
  "5": "C"
};
objWithPoisonedLengthToString[Symbol.isConcatSpreadable] = true;
assert.throws(Test262Error, function() {
  [].concat(objWithPoisonedLengthToString);
}, '[].concat(objWithPoisonedLengthToString) throws a Test262Error exception');

reportCompare(0, 0);