Source code
Revision control
Copy as Markdown
Other Tools
// |reftest| shell-option(--enable-float16array)
// Test %TypedArray%.prototype.set(typedArray, offset) when called with wrapped
// typed array.
if (typeof newGlobal === "function") {
var otherGlobal = newGlobal();
function taintLengthProperty(obj) {
Object.defineProperty(obj, "length", {
get() {
assertEq(true, false);
}
});
}
for (var TA of anyTypedArrayConstructors) {
var target = new TA(4);
var source = new otherGlobal[TA.name]([10, 20]);
// Ensure "length" getter accessor isn't called.
taintLengthProperty(source);
assertEqArray(target, [0, 0, 0, 0]);
target.set(source, 1);
assertEqArray(target, [0, 10, 20, 0]);
}
// Detachment checks are also applied correctly for wrapped typed arrays.
if (typeof detachArrayBuffer === "function") {
// Create typed array from different global (explicit constructor call).
for (var TA of typedArrayConstructors) {
var target = new TA(4);
var source = new otherGlobal[TA.name](1);
taintLengthProperty(source);
// Called with wrapped typed array, array buffer already detached.
otherGlobal.detachArrayBuffer(source.buffer);
assertThrowsInstanceOf(() => target.set(source), TypeError);
var source = new otherGlobal[TA.name](1);
taintLengthProperty(source);
// Called with wrapped typed array, array buffer detached when
// processing offset parameter.
var offset = {
valueOf() {
otherGlobal.detachArrayBuffer(source.buffer);
return 0;
}
};
assertThrowsInstanceOf(() => target.set(source, offset), TypeError);
}
// Create typed array from different global (implictly created when
// ArrayBuffer is a CCW).
for (var TA of typedArrayConstructors) {
var target = new TA(4);
var source = new TA(new otherGlobal.ArrayBuffer(1 * TA.BYTES_PER_ELEMENT));
taintLengthProperty(source);
// Called with wrapped typed array, array buffer already detached.
otherGlobal.detachArrayBuffer(source.buffer);
assertThrowsInstanceOf(() => target.set(source), TypeError);
var source = new TA(new otherGlobal.ArrayBuffer(1 * TA.BYTES_PER_ELEMENT));
taintLengthProperty(source);
// Called with wrapped typed array, array buffer detached when
// processing offset parameter.
var offset = {
valueOf() {
otherGlobal.detachArrayBuffer(source.buffer);
return 0;
}
};
assertThrowsInstanceOf(() => target.set(source, offset), TypeError);
}
}
}
if (typeof reportCompare === "function")
reportCompare(true, true);