| Ben Murdoch | da12d29 | 2016-06-02 14:46:10 +0100 | [diff] [blame] | 1 | // Copyright 2016 the V8 project authors. All rights reserved. |
| 2 | // Use of this source code is governed by a BSD-style license that can be | ||||
| 3 | // found in the LICENSE file. | ||||
| 4 | |||||
| 5 | class MyArray extends Array { } | ||||
| 6 | Object.prototype[Symbol.species] = MyArray; | ||||
| 7 | delete Array[Symbol.species]; | ||||
| 8 | __v_1 = Math.pow(2, 31); | ||||
| 9 | __v_2 = []; | ||||
| 10 | __v_2[__v_1] = 31; | ||||
| 11 | __v_4 = []; | ||||
| 12 | __v_4[__v_1 - 2] = 33; | ||||
| 13 | assertThrows(() => __v_2.concat(__v_4), RangeError); | ||||