diff options
Diffstat (limited to 'deps/v8/test/mjsunit/regress/regress-crbug-882233-1.js')
-rw-r--r-- | deps/v8/test/mjsunit/regress/regress-crbug-882233-1.js | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/regress/regress-crbug-882233-1.js b/deps/v8/test/mjsunit/regress/regress-crbug-882233-1.js new file mode 100644 index 0000000000..197660a683 --- /dev/null +++ b/deps/v8/test/mjsunit/regress/regress-crbug-882233-1.js @@ -0,0 +1,17 @@ +// Copyright 2018 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +// Intended to test bug [882233] on CSA fast-path. + +let array = []; +Object.defineProperty(array, 'length', {writable: false}); + +assertEquals(array.length, 0); +assertThrows(() => array.shift(), TypeError); + +let object = { length: 0 }; +Object.defineProperty(object, 'length', {writable: false}); + +assertEquals(object.length, 0); +assertThrows(() => Array.prototype.shift.call(object)); |