1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
// Copyright (C) 2018 Leo Balter. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
esid: sec-array.prototype.flatMap
description: >
Assert behavior if this value has a poisoned custom species constructor
info: |
Array.prototype.flatMap ( mapperFunction [ , thisArg ] )
1. Let O be ? ToObject(this value).
2. Let sourceLen be ? ToLength(? Get(O, "length")).
...
5. Let A be ? ArraySpeciesCreate(O, 0).
6. Perform ? FlattenIntoArray(A, O, sourceLen, 0, 1, mapperFunction, T).
7. Return A.
ArraySpeciesCreate ( originalArray, length )
3. Let isArray be ? IsArray(originalArray).
4. If isArray is false, return ? ArrayCreate(length).
5. Let C be ? Get(originalArray, "constructor").
6. If IsConstructor(C) is true, then
...
7. If Type(C) is Object, then
a. Set C to ? Get(C, @@species).
b. If C is null, set C to undefined.
8. If C is undefined, return ? ArrayCreate(length).
9. If IsConstructor(C) is false, throw a TypeError exception.
10. Return ? Construct(C, « length »).
features: [Array.prototype.flatMap, Symbol, Symbol.species]
---*/
assert.sameValue(typeof Array.prototype.flatMap, 'function');
var arr = [];
var mapperFn = function(e) { return e; };
var called = 0;
var ctorCalled = 0;
function ctor(len) {
assert.sameValue(new.target, ctor, 'new target is defined');
assert.sameValue(len, 0, 'first argument is always 0');
ctorCalled++;
throw new Test262Error();
}
arr.constructor = {
get [Symbol.species]() {
called++;
return ctor;
}
};
assert.throws(Test262Error, function() {
arr.flatMap(mapperFn);
}, 'Return abrupt completion from species custom ctor');
assert.sameValue(called, 1, 'got species once');
assert.sameValue(ctorCalled, 1, 'called custom ctor once');
reportCompare(0, 0);
|