1 files changed, 32 insertions, 0 deletions
diff --git a/js/xpconnect/tests/unit/test_bug853709.js b/js/xpconnect/tests/unit/test_bug853709.js
new file mode 100644
index 000000000..c7e51757d
--- /dev/null
+++ b/js/xpconnect/tests/unit/test_bug853709.js
@@ -0,0 +1,32 @@
+const Cu = Components.utils;
+
+function setupChromeSandbox() {
+  this.chromeObj = {a: 2, __exposedProps__: {a: "rw", b: "rw"} };
+  this.chromeArr = [4, 2, 1];
+}
+
+function checkDefineThrows(sb, obj, prop, desc) {
+  var result = Cu.evalInSandbox('(function() { try { Object.defineProperty(' + obj + ', "' + prop + '", ' + desc.toSource() + '); return "nothrow"; } catch (e) { return e.toString(); }})();', sb);
+  do_check_neq(result, 'nothrow');
+  do_check_true(!!/denied/.exec(result));
+  do_check_true(result.indexOf(prop) != -1); // Make sure the prop name is in the error message.
+}
+
+function run_test() {
+  var chromeSB = new Cu.Sandbox(this);
+  var contentSB = new Cu.Sandbox('http://www.example.org');
+  Cu.evalInSandbox('(' + setupChromeSandbox.toSource() + ')()', chromeSB);
+  contentSB.chromeObj = chromeSB.chromeObj;
+  contentSB.chromeArr = chromeSB.chromeArr;
+
+  do_check_eq(Cu.evalInSandbox('chromeObj.a', contentSB), 2);
+  try {
+    Cu.evalInSandbox('chromeArr[1]', contentSB);
+    do_check_true(false);
+  } catch (e) { do_check_true(/denied|insecure/.test(e)); }
+
+  checkDefineThrows(contentSB, 'chromeObj', 'a', {get: function() { return 2; }});
+  checkDefineThrows(contentSB, 'chromeObj', 'a', {configurable: true, get: function() { return 2; }});
+  checkDefineThrows(contentSB, 'chromeObj', 'b', {configurable: true, get: function() { return 2; }, set: function() {}});
+  checkDefineThrows(contentSB, 'chromeArr', '1', {configurable: true, get: function() { return 2; }});
+}