77a37e44f6
BUG=3462 LOG=Y R=verwaest@chromium.org Review URL: https://codereview.chromium.org/417793002 Patch from Erik Arvidsson <arv@chromium.org>. git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@22606 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
49 lines
1.2 KiB
JavaScript
49 lines
1.2 KiB
JavaScript
// Copyright 2014 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
|
|
function TestFunctionPrototypeSetter() {
|
|
var f = function() {};
|
|
var o = {__proto__: f};
|
|
o.prototype = 42;
|
|
assertEquals(42, o.prototype);
|
|
assertTrue(o.hasOwnProperty('prototype'));
|
|
}
|
|
TestFunctionPrototypeSetter();
|
|
|
|
|
|
function TestFunctionPrototypeSetterOnValue() {
|
|
var f = function() {};
|
|
var fp = f.prototype;
|
|
Number.prototype.__proto__ = f;
|
|
var n = 42;
|
|
var o = {};
|
|
n.prototype = o;
|
|
assertEquals(fp, n.prototype);
|
|
assertEquals(fp, f.prototype);
|
|
assertFalse(Number.prototype.hasOwnProperty('prototype'));
|
|
}
|
|
TestFunctionPrototypeSetterOnValue();
|
|
|
|
|
|
function TestArrayLengthSetter() {
|
|
var a = [1];
|
|
var o = {__proto__: a};
|
|
o.length = 2;
|
|
assertEquals(2, o.length);
|
|
assertEquals(1, a.length);
|
|
assertTrue(o.hasOwnProperty('length'));
|
|
}
|
|
TestArrayLengthSetter();
|
|
|
|
|
|
function TestArrayLengthSetterOnValue() {
|
|
Number.prototype.__proto__ = [1];
|
|
var n = 42;
|
|
n.length = 2;
|
|
assertEquals(1, n.length);
|
|
assertFalse(Number.prototype.hasOwnProperty('length'));
|
|
}
|
|
TestArrayLengthSetterOnValue();
|