| Index: src/typedarray.js
|
| diff --git a/src/typedarray.js b/src/typedarray.js
|
| index ed9de23b50e1a6a4b7b3cb06948ac24cf4881d0b..21dd9c82d14f02d1d265f87604386e57cd09f890 100644
|
| --- a/src/typedarray.js
|
| +++ b/src/typedarray.js
|
| @@ -99,6 +99,9 @@ macro TYPED_ARRAY_CONSTRUCTOR(ARRAY_ID, NAME, ELEMENT_SIZE)
|
| function NAMEConstructByArrayLike(obj, arrayLike) {
|
| var length = arrayLike.length;
|
| var l = ToPositiveInteger(length, "invalid_typed_array_length");
|
| + if (l > %MaxSmi()) {
|
| + throw MakeRangeError("invalid_typed_array_length");
|
| + }
|
| if(!%TypedArrayInitializeFromArrayLike(obj, ARRAY_ID, arrayLike, l)) {
|
| for (var i = 0; i < l; i++) {
|
| // It is crucial that we let any execptions from arrayLike[i]
|
|
|