The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/js/src/jit-test/tests/arrays/reverse-nonarray-nonwritable-element.js	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,13 @@
     1.4 +// Array.prototype.reverse does a strict assignment to this.length even if the
     1.5 +// caller is nonstrict. Bug 886087.
     1.6 +
     1.7 +load(libdir + "asserts.js");
     1.8 +
     1.9 +// obj[1] is read-only
    1.10 +var obj = {0: "zero", length: 2, reverse: [].reverse};
    1.11 +Object.defineProperty(obj, "1", {configurable: true, value: "one", writable: false});
    1.12 +assertThrowsInstanceOf(() => obj.reverse(), TypeError);
    1.13 +
    1.14 +// obj[1] has only a getter
    1.15 +Object.defineProperty(obj, "1", {configurable: true, get: () => "one"});
    1.16 +assertThrowsInstanceOf(() => obj.reverse(), TypeError);