7bf6d477d4
Instead of looking up the specific maps in every native context, just check against the instance type. Bug: v8:11256 Change-Id: Ib50d599c014c95b03ba3260014dfcbd9ec82982c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2593337 Reviewed-by: Camillo Bruni <cbruni@chromium.org> Commit-Queue: Sathya Gunasekaran <gsathya@chromium.org> Cr-Commit-Position: refs/heads/master@{#71802}
21 lines
763 B
JavaScript
21 lines
763 B
JavaScript
// Copyright 2020 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --no-stress-opt
|
|
|
|
assertTrue(%ArraySpeciesProtector());
|
|
class MyArray extends Array { }
|
|
Object.defineProperty(Array, Symbol.species, { value: MyArray });
|
|
assertFalse(%ArraySpeciesProtector());
|
|
|
|
assertTrue(%PromiseSpeciesProtector());
|
|
class MyPromise extends Promise { }
|
|
Object.defineProperty(Promise, Symbol.species, { value: MyPromise });
|
|
assertFalse(%PromiseSpeciesProtector());
|
|
|
|
assertTrue(%RegExpSpeciesProtector());
|
|
class MyRegExp extends RegExp { }
|
|
Object.defineProperty(RegExp, Symbol.species, { value: MyRegExp });
|
|
assertFalse(%RegExpSpeciesProtector());
|