blob: bebe39d1515d6b029f0673f8416239c00641f7aa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
// Copyright (C) 2016 the V8 project authors. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
esid: sec-array.prototype.splice
description: Accept non-Array constructors from other realms
info: |
1. Let O be ? ToObject(this value).
[...]
9. Let A be ? ArraySpeciesCreate(O, actualDeleteCount).
[...]
9.4.2.3 ArraySpeciesCreate
[...]
5. Let C be ? Get(originalArray, "constructor").
6. If IsConstructor(C) is true, then
a. Let thisRealm be the current Realm Record.
b. Let realmC be ? GetFunctionRealm(C).
c. If thisRealm and realmC are not the same Realm Record, then
i. If SameValue(C, realmC.[[Intrinsics]].[[%Array%]]) is true, let C
be undefined.
[...]
features: [cross-realm, Symbol.species]
---*/
var array = [];
var callCount = 0;
var CustomCtor = function() {};
var OObject = $262.createRealm().global.Object;
var speciesDesc = {
get: function() {
callCount += 1;
}
};
var result;
array.constructor = OObject;
OObject[Symbol.species] = CustomCtor;
Object.defineProperty(Array, Symbol.species, speciesDesc);
result = array.splice();
assert.sameValue(Object.getPrototypeOf(result), CustomCtor.prototype);
assert.sameValue(callCount, 0, 'Array species constructor is not referenced');
reportCompare(0, 0);
|