Source code
Revision control
Copy as Markdown
Other Tools
// Copyright (C) 2016 the V8 project authors. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
esid: sec-internalizejsonproperty
description: >
Abrupt completion from array "length" property access while reviving
info: |
JSON.parse ( text [ , reviver ] )
[...]
7. If IsCallable(reviver) is true, then
[...]
e. Return ? InternalizeJSONProperty(root, rootName).
Runtime Semantics: InternalizeJSONProperty ( holder, name)
1. Let val be ? Get(holder, name).
2. If Type(val) is Object, then
a. Let isArray be ? IsArray(val).
b. If isArray is true, then
i. Set I to 0.
ii. Let len be ? ToLength(? Get(val, "length")).
features: [Proxy]
---*/
var badLength = new Proxy([], {
get: function(_, name) {
if (name === 'length') {
throw new Test262Error();
}
}
});
assert.throws(Test262Error, function() {
JSON.parse('[0,0]', function() {
this[1] = badLength;
});
});
reportCompare(0, 0);