blob: ec7e011813c48f58cf5d84225b92d873cf4b793f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
// Copyright (C) 2015 the V8 project authors. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
es6id: 21.2.5.11
description: >
Behavior when error thrown while accessing `length` property of match
result
info: |
[...]
24. Repeat, while q < size
a. Let setStatus be Set(splitter, "lastIndex", q, true).
[...]
c. Let z be RegExpExec(splitter, S).
[...]
f. Else z is not null,
iv. Else e ≠ p,
[...]
7. Let numberOfCaptures be ToLength(Get(z, "length")).
8. ReturnIfAbrupt(numberOfCaptures).
features: [Symbol.split, Symbol.species]
---*/
var obj = {
constructor: function() {}
};
var poisonedLength = {
get length() {
throw new Test262Error();
}
};
var fakeRe = {
exec: function() {
return poisonedLength;
}
};
obj.constructor[Symbol.species] = function() {
return fakeRe;
};
assert.throws(Test262Error, function() {
RegExp.prototype[Symbol.split].call(obj, 'abcd');
});
reportCompare(0, 0);
|