summaryrefslogtreecommitdiff
path: root/deps/v8/test/mjsunit/regress/regress-840106.js
blob: b49464dce5223ad035b76dd3f656e435958c032e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Flags: --allow-natives-syntax

var buffer = new ArrayBuffer(1024 * 1024);
buffer.constructor = {
  [Symbol.species]: new Proxy(function() {}, {
    get: _ => {
      %ArrayBufferNeuter(buffer);
    }
  })
};
var array1 = new Uint8Array(buffer, 0, 1024);
assertThrows(() => new Uint8Array(array1));
assertThrows(() => new Int8Array(array1));