Index: test/mjsunit/es6/array-concat-revoked-proxy-1.js |
diff --git a/test/mjsunit/es6/array-concat-revoked-proxy-1.js b/test/mjsunit/es6/array-concat-revoked-proxy-1.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..2dfddc3504f60ad10dffaff44d7e2926dd9eaeb4 |
--- /dev/null |
+++ b/test/mjsunit/es6/array-concat-revoked-proxy-1.js |
@@ -0,0 +1,19 @@ |
+// Copyright 2016 the V8 project authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+(function testConcatRevokedProxyToArrayInPrototype() { |
+ "use strict"; |
+ var handler = { |
+ get(_, name) { |
+ if (name === Symbol.isConcatSpreadable) { |
+ p.revoke(); |
+ } |
+ return target[name]; |
+ } |
+ } |
+ |
+ var p = Proxy.revocable([], handler); |
+ var target = { __proto__: p.proxy }; |
+ assertThrows(function() { [].concat(target); }, TypeError); |
+})(); |