blob: 2ef6eacd265a1357ab303a8c89bf0587bb0cad5b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
// Copyright (c) 2014 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
/*---
esid: sec-array.prototype.concat
description: Array.prototype.concat array like length valueOf throws
features: [Symbol.isConcatSpreadable]
---*/
var objWithPoisonedLengthValueOf = {
"length": {
valueOf: function() {
throw new Test262Error();
},
toString: null
},
"1": "A",
"3": "B",
"5": "C"
};
objWithPoisonedLengthValueOf[Symbol.isConcatSpreadable] = true;
assert.throws(Test262Error, function() {
[].concat(objWithPoisonedLengthValueOf);
}, '[].concat(objWithPoisonedLengthValueOf) throws a Test262Error exception');
reportCompare(0, 0);
|