Chromium Code Reviews| Index: src/typedarray.js |
| diff --git a/src/typedarray.js b/src/typedarray.js |
| index ce52cdf15c0b50db12eb9c904fd1781ce30acf26..8e18b5e66e08755ec7f9389530eef640100b4119 100644 |
| --- a/src/typedarray.js |
| +++ b/src/typedarray.js |
| @@ -330,6 +330,7 @@ function TypedArraySet(obj, offset) { |
| } |
| return; |
| } |
| + l = $toLength(l); |
| if (intOffset + l > this.length) { |
| throw MakeRangeError(kTypedArraySetSourceTooLarge); |
| } |