The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/arrays/push-densely-nonwritable-length.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,31 @@
     1.4 +function f(arr, v)
     1.5 +{
     1.6 +  arr.push(v);
     1.7 +}
     1.8 +
     1.9 +function basic(out)
    1.10 +{
    1.11 +  // Use a much-greater capacity than the eventual non-writable length.
    1.12 +  var a = out.a = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15];
    1.13 +  Object.defineProperty(a, "length", { writable: false, value: 6 });
    1.14 +
    1.15 +  f(a, 99);
    1.16 +}
    1.17 +
    1.18 +var obj = {};
    1.19 +var a;
    1.20 +
    1.21 +try
    1.22 +{
    1.23 +  basic(obj);
    1.24 +  throw new Error("didn't throw!");
    1.25 +}
    1.26 +catch (e)
    1.27 +{
    1.28 +  assertEq(e instanceof TypeError, true, "expected TypeError, got " + e);
    1.29 +
    1.30 +  a = obj.a;
    1.31 +  assertEq(a.hasOwnProperty(6), false);
    1.32 +  assertEq(a[6], undefined);
    1.33 +  assertEq(a.length, 6);
    1.34 +}