1 files changed, 34 insertions, 0 deletions
diff --git a/js/src/tests/non262/TypedArray/constructor-byteoffsets-bounds.js b/js/src/tests/non262/TypedArray/constructor-byteoffsets-bounds.js
new file mode 100644
index 0000000000..ce213038d4
--- /dev/null
+++ b/js/src/tests/non262/TypedArray/constructor-byteoffsets-bounds.js
@@ -0,0 +1,34 @@
+// 22.2.4.5 TypedArray ( buffer [ , byteOffset [ , length ] ] )
+
+// Test bound checks around for |byteOffset| and |length| arguments.
+
+const ab = new ArrayBuffer(0);
+
+for (let TA of typedArrayConstructors) {
+    // Test bound checks around INT32_MAX for |byteOffset| argument.
+    assertThrowsInstanceOf(() => new TA(ab, 2**31 - TA.BYTES_PER_ELEMENT), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**31 - 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**31), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**31 + 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**31 + TA.BYTES_PER_ELEMENT), RangeError);
+
+    // Test bound checks around UINT32_MAX for |byteOffset| argument.
+    assertThrowsInstanceOf(() => new TA(ab, 2**32 - TA.BYTES_PER_ELEMENT), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**32 - 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**32), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**32 + 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 2**32 + TA.BYTES_PER_ELEMENT), RangeError);
+
+    // Test bound checks around INT32_MAX for |length| argument.
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**31 - 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**31), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**31 + 1), RangeError);
+
+    // Test bound checks around UINT32_MAX for |length| argument.
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**32 - 1), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**32), RangeError);
+    assertThrowsInstanceOf(() => new TA(ab, 0, 2**32 + 1), RangeError);
+}
+
+if (typeof reportCompare === "function")
+    reportCompare(true, true);