0410e7e850
This is a reland ofedc4ae14c8With fixes for crbug.com/752846, crbug.com/752712, crbug.com/752850 Previously landed as:47a97aa53b/ 47113 Previously landed as:15ef03cbf3/ 47159 Previously landed as:e86c066b77/ 47235 Previously landed as:edc4ae14c8/ 47245 TBR=jkummerow@chromium.org, franzih@chromium.org, bmeurer@chromium.org, jgruber@chromium.org, mstarzinger@chromium.org Bug: v8:6559, v8:6557 Change-Id: I956486e90aab36ba95676bd4ec2febebed509fc1 Reviewed-on: https://chromium-review.googlesource.com/609781 Reviewed-by: Georg Neis <neis@chromium.org> Reviewed-by: Franziska Hinkelmann <franzih@chromium.org> Commit-Queue: Maya Lekova <mslekova@google.com> Cr-Commit-Position: refs/heads/master@{#47299}
25 lines
594 B
JavaScript
25 lines
594 B
JavaScript
// Copyright 2017 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
// Proxy get trap doesn't fail when the value returned by it
|
|
// is a number.
|
|
|
|
var number = 1;
|
|
|
|
(function testFailingInvariant() {
|
|
var obj = {};
|
|
var handler = {
|
|
get: function() {}
|
|
};
|
|
var proxy = new Proxy(obj, handler);
|
|
Object.defineProperty(handler, 'get', {
|
|
get: function() {
|
|
return number;
|
|
}
|
|
});
|
|
assertThrows(function(){ proxy.property; }, TypeError);
|
|
})();
|