blob: 64a1fce6273dbf4b9d91c6c3fd34e7916799763f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
// Copyright (c) 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
/*---
esid: sec-array.prototype.concat
description: Array.prototype.concat array like length to string throws
features: [Symbol.isConcatSpreadable]
---*/
var objWithPoisonedLengthToString = {
"length": {
toString: function() {
throw new Test262Error();
},
valueOf: null
},
"1": "A",
"3": "B",
"5": "C"
};
objWithPoisonedLengthToString[Symbol.isConcatSpreadable] = true;
assert.throws(Test262Error, function() {
[].concat(objWithPoisonedLengthToString);
}, '[].concat(objWithPoisonedLengthToString) throws a Test262Error exception');
reportCompare(0, 0);
|