test262: test262/test/language/expressions/tagged-template/template-object.js
authorcommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sun, 16 Apr 2017 20:01:25 +0000 (20:01 +0000)
committercommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sun, 16 Apr 2017 20:01:25 +0000 (20:01 +0000)
commitd15053d2fcbbd965e23cd9fcf4e66fa25c5152e2
tree36cb948b4c1df3bfc094a1f5a307106962479575
parent34c1813a5ba1d735573261806d9467b04a0d4c41
test262: test262/test/language/expressions/tagged-template/template-object.js
https://bugs.webkit.org/show_bug.cgi?id=170878

Patch by Joseph Pecoraro <pecoraro@apple.com> on 2017-04-16
Reviewed by Saam Barati.

JSTests:

* stress/array-length-not-writable.js: Added.
(assert):
* test262.yaml:

Source/JavaScriptCore:

* runtime/JSArray.cpp:
(JSC::JSArray::put):
The fast path for setting an Array's length should check if length is
writable before checking for and possibly throwing a RangeError.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@215401 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JSTests/ChangeLog
JSTests/stress/array-length-not-writable.js [new file with mode: 0644]
JSTests/test262.yaml
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/JSArray.cpp