1 files changed, 32 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/String/prototype/split/transferred-to-number-separator-override-tostring-returns-regexp.js b/js/src/tests/test262/built-ins/String/prototype/split/transferred-to-number-separator-override-tostring-returns-regexp.js
new file mode 100644
index 0000000000..ae90427c91
--- /dev/null
+++ b/js/src/tests/test262/built-ins/String/prototype/split/transferred-to-number-separator-override-tostring-returns-regexp.js
@@ -0,0 +1,32 @@
+// Copyright 2009 the Sputnik authors.  All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+info: |
+    String.prototype.split(separator, limit):
+    i) can be transferred to other kinds of objects for use as a method.
+    separator and limit can be any kinds of object since:
+    ii) if separator is not RegExp ToString(separator) performs and
+    iii) ToInteger(limit) performs
+es5id: 15.5.4.14_A1_T16
+description: >
+    Argument is object, and instance is Number.  Object have overrided
+    toString function, that return regexp
+---*/
+
+var __obj = {
+  toString: function() {
+    return /\u0037\u0037/g;
+  }
+};
+
+Number.prototype.split = String.prototype.split;
+
+try {
+  var __split = (6776767677.006771122677555).split(__obj);
+  Test262Error.thrower('#1: "__split = 6776767677.006771122677555.split(__obj)" lead to throwing exception');
+} catch (e) {
+  assert(e instanceof TypeError, 'The result of `(e instanceof TypeError)` is true');
+}
+
+reportCompare(0, 0);