Thu, 22 Jan 2015 13:21:57 +0100
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
1 function C() {
2 this.m = function () {}; // JSOP_SETMETHOD
3 }
5 var a = [new C, new C, new C, new C, new C, new C, new C, new C, new C];
6 var b = [new C, new C, new C, new C, new C, new C, a[8], new C, new C];
8 var thrown = 'none';
9 try {
10 for (var i = 0; i < 9; i++) {
11 a[i].m();
12 b[i].m = 0.7; // MethodWriteBarrier required here
13 }
14 } catch (exc) {
15 thrown = exc.name;
16 }
17 assertEq(thrown, 'TypeError');