summaryrefslogtreecommitdiffstats
path: root/js/src/jit-test/tests/TypedObject/bug970285.js
diff options
context:
space:
mode:
Diffstat (limited to 'js/src/jit-test/tests/TypedObject/bug970285.js')
-rw-r--r--js/src/jit-test/tests/TypedObject/bug970285.js11
1 files changed, 11 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/TypedObject/bug970285.js b/js/src/jit-test/tests/TypedObject/bug970285.js
new file mode 100644
index 000000000..f5d36cdc9
--- /dev/null
+++ b/js/src/jit-test/tests/TypedObject/bug970285.js
@@ -0,0 +1,11 @@
+// |jit-test| error:TypeError
+
+if (!this.hasOwnProperty("TypedObject"))
+ throw new TypeError();
+
+// Test that we detect invalid lengths supplied to unsized array
+// constructor. Public domain.
+
+var AA = TypedObject.uint8.array(2147483647).array();
+var aa = new AA(-1);
+