v8/test/mjsunit/harmony/array-concat-array-proto-getter.js
cbruni f87014ebde [runtime] Avoid @@isConcatSpreadable lookup for fast path Array.prototype.concat
Currently we do not check for @@isConcatSpreadable properly. If the Symbol is
set on the Array.prototype or Object.prototype the current fast paths fail.
This CL adds a fix to globally invalidate a isConcatSpreadable_protector.

Drive-by-fix: use named accessors for context variables

LOG=N
BUG=chromium:542504, v8:903

Review-Url: https://codereview.chromium.org/1409123003
Cr-Commit-Position: refs/heads/master@{#36201}
2016-05-12 08:52:36 +00:00

54 lines
2.0 KiB
JavaScript

// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Check that @@isConcatSpreadable is checked when set on Object.prototype
"use strict"
var array = [1, 2, 3];
var object = {length: 1, '0': 'a'};
function testConcatDefaults() {
assertEquals(array, [].concat(array));
assertEquals(array, array.concat([]));
assertEquals([1, 2, 3, 1, 2, 3], array.concat(array));
assertEquals([object], [].concat(object));
assertEquals([1, 2, 3, object], array.concat(object));
assertEquals([object], Array.prototype.concat.call(object,[]));
assertEquals([object, 1, 2, 3], Array.prototype.concat.call(object, array));
assertEquals([object, object], Array.prototype.concat.call(object, object));
}
testConcatDefaults();
var concatSpreadable = false;
Object.defineProperty(Array.prototype, Symbol.isConcatSpreadable, {
get() { return concatSpreadable },
configurable: true
});
assertEquals([[], array], [].concat(array));
assertEquals([array, []], array.concat([]));
assertEquals([array, array], array.concat(array));
assertEquals([[], object], [].concat(object));
assertEquals([array, object], array.concat(object));
assertEquals([object, []], Array.prototype.concat.call(object,[]));
assertEquals([object, array], Array.prototype.concat.call(object, array));
assertEquals([object, object], Array.prototype.concat.call(object, object));
concatSpreadable = true;
assertEquals(array, [].concat(array));
assertEquals(array, array.concat([]));
assertEquals([1, 2, 3, 1, 2, 3], array.concat(array));
assertEquals([object], [].concat(object));
assertEquals([1, 2, 3, object], array.concat(object));
assertEquals([object], Array.prototype.concat.call(object,[]));
assertEquals([object, 1, 2, 3], Array.prototype.concat.call(object, array));
assertEquals([object, object], Array.prototype.concat.call(object, object));
delete Array.prototype[Symbol.isConcatSpreadable];
testConcatDefaults();