Array Iterator next should check for own property

test/mjsunit/harmony/array-iterator.js

Index: test/mjsunit/harmony/array-iterator.js
diff --git a/test/mjsunit/harmony/array-iterator.js b/test/mjsunit/harmony/array-iterator.js
index cbe3b142c476b7ab506b490b73cbdfcd8e06b108..2642d7b2318e3355ccd0a547207fbe089c1217f8 100644
--- a/test/mjsunit/harmony/array-iterator.js
+++ b/test/mjsunit/harmony/array-iterator.js
@@ -214,3 +214,15 @@ function TestForArrayEntries() {
   }
 }
 TestForArrayEntries();
+
+
+function TestNonOwnSlots() {
+  var array = [0];
+  var iterator = array.values();
+  var object = {__proto__: iterator};
+
+  assertThrows(function() {
+    object.next();
+  }, TypeError);
+}
+TestNonOwnSlots();