1 files changed, 53 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/TypedArray/prototype/toReversed/length-property-ignored.js b/js/src/tests/test262/built-ins/TypedArray/prototype/toReversed/length-property-ignored.js
new file mode 100644
index 0000000000..b4c6f56470
--- /dev/null
+++ b/js/src/tests/test262/built-ins/TypedArray/prototype/toReversed/length-property-ignored.js
@@ -0,0 +1,53 @@
+// |reftest| shell-option(--enable-change-array-by-copy) skip-if(!Array.prototype.with||!xulRuntime.shell) -- change-array-by-copy is not enabled unconditionally, requires shell-options
+// Copyright (C) 2021 Igalia, S.L. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-%typedarray%.prototype.toReversed
+description: >
+  %TypedArray%.prototype.toReversed does not read a "length" property
+info: |
+  %TypedArray%.prototype.toReversed ( )
+
+  ...
+  3. Let length be O.[[ArrayLength]].
+  ...
+includes: [testTypedArray.js, compareArray.js]
+features: [TypedArray, change-array-by-copy]
+---*/
+
+testWithTypedArrayConstructors(TA => {
+  var ta = new TA([0, 1, 2]);
+  Object.defineProperty(ta, "length", { value: 2 })
+  var res = ta.toReversed();
+  assert.compareArray(res, [2, 1, 0]);
+  assert.sameValue(res.length, 3);
+
+  ta = new TA([0, 1, 2]);
+  Object.defineProperty(ta, "length", { value: 5 });
+  res = ta.toReversed();
+  assert.compareArray(res, [2, 1, 0]);
+  assert.sameValue(res.length, 3);
+});
+
+function setLength(length) {
+    Object.defineProperty(TypedArray.prototype, "length", {
+        get: () => length,
+    });
+}
+
+testWithTypedArrayConstructors(TA => {
+  var ta = new TA([0, 1, 2]);
+
+  setLength(2);
+  var res = ta.toReversed();
+  setLength(3);
+  assert.compareArray(res, [2, 1, 0]);
+
+  setLength(5);
+  res = ta.toReversed();
+  setLength(3);
+  assert.compareArray(res, [2, 1, 0]);
+});
+
+reportCompare(0, 0);