The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/arrays/pop-nonarray-nonwritable-length.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,13 @@
     1.4 +// Array.prototype.pop does a strict assignment to this.length even if the
     1.5 +// caller is nonstrict. Bug 886087.
     1.6 +
     1.7 +load(libdir + "asserts.js");
     1.8 +
     1.9 +// obj.length is read-only
    1.10 +var obj = {pop: [].pop, 0: "zero"};
    1.11 +Object.defineProperty(obj, "length", {configurable: true, value: 1, writable: false});
    1.12 +assertThrowsInstanceOf(() => obj.pop(), TypeError);
    1.13 +
    1.14 +// obj.length has only a getter
    1.15 +obj = {pop: [].pop, 0: "zero", get length() { return 1; }};
    1.16 +assertThrowsInstanceOf(() => obj.pop(), TypeError);