2016-04-07 14:06:55 -07:00
|
|
|
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
|
|
// found in the LICENSE file.
|
|
|
|
|
2016-09-06 22:49:51 +02:00
|
|
|
// Flags: --allow-natives-syntax
|
2016-04-07 14:06:55 -07:00
|
|
|
|
|
|
|
// Overwriting an array instance's __proto__ updates the protector
|
|
|
|
|
|
|
|
let x = [];
|
|
|
|
|
|
|
|
assertEquals(Array, x.map(()=>{}).constructor);
|
|
|
|
assertEquals(Array, x.filter(()=>{}).constructor);
|
|
|
|
assertEquals(Array, x.slice().constructor);
|
|
|
|
assertEquals(Array, x.splice().constructor);
|
|
|
|
assertEquals(Array, x.concat([1]).constructor);
|
|
|
|
assertEquals(1, x.concat([1])[0]);
|
|
|
|
|
|
|
|
class MyArray extends Array { }
|
|
|
|
|
|
|
|
x.__proto__ = MyArray.prototype;
|
2018-05-31 11:11:57 +02:00
|
|
|
assertTrue(%ArraySpeciesProtector());
|
2016-04-07 14:06:55 -07:00
|
|
|
|
|
|
|
assertEquals(MyArray, x.map(()=>{}).constructor);
|
|
|
|
assertEquals(MyArray, x.filter(()=>{}).constructor);
|
|
|
|
assertEquals(MyArray, x.slice().constructor);
|
|
|
|
assertEquals(MyArray, x.splice().constructor);
|
|
|
|
assertEquals(MyArray, x.concat([1]).constructor);
|
|
|
|
assertEquals(1, x.concat([1])[0]);
|