1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
// Copyright (C) 2015 the V8 project authors. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
es6id: 21.2.5.11
description: >
Behavior when error thrown while accessing capturing group match
info: |
[...]
24. Repeat, while q < size
a. Let setStatus be Set(splitter, "lastIndex", q, true).
[...]
c. Let z be RegExpExec(splitter, S).
[...]
f. Else z is not null,
iv. Else e ≠ p,
[...]
11. Repeat, while i ≤ numberOfCaptures.
[...]
a. Let nextCapture be Get(z, ToString(i)).
b. ReturnIfAbrupt(nextCapture).
features: [Symbol.split, Symbol.species]
---*/
var result;
var obj = {
constructor: function() {}
};
var poisonedCapture = {
length: 3,
0: 'a',
1: 'b',
get 2() {
throw new Test262Error();
}
};
var fakeRe = {
exec: function() {
fakeRe.lastIndex = 1;
return poisonedCapture;
}
};
obj.constructor[Symbol.species] = function() {
return fakeRe;
};
assert.throws(Test262Error, function() {
RegExp.prototype[Symbol.split].call(obj, 'a');
});
reportCompare(0, 0);
|
