archives

« Bugzilla Issues Index

#3060 — 24.1.4.3 ArrayBuffer.prototype.slice: Check new ArrayBuffer is not neutered


24.1.4.3 ArrayBuffer.prototype.slice ( start , end )

Add a check that `new` is not a neutered array buffer.


Test case:
---
let buf = new ArrayBuffer(0);
buf.constructor = function Constructor(len) {
let _new = new ArrayBuffer(len);
// Internal API call to neuter array buffer
neuterArrayBuffer(_new);
return _new;
};
buf.slice(0);
---


fixed in rev27 editor's draft


fixed in rev27 draft