1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
// Copyright (c) 2012 Ecma International. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.
/*---
es5id: 15.4.4.20-9-b-15
description: >
Array.prototype.filter - decreasing length of array with prototype
property causes prototype index property to be visited
---*/
function callbackfn(val, idx, obj) {
return true;
}
var arr = [0, 1, 2];
Object.defineProperty(Array.prototype, "2", {
get: function () {
return "prototype";
},
configurable: true
});
Object.defineProperty(arr, "1", {
get: function () {
arr.length = 2;
return 1;
},
configurable: true
});
var newArr = arr.filter(callbackfn);
assert.sameValue(newArr.length, 3, 'newArr.length');
assert.sameValue(newArr[2], "prototype", 'newArr[2]');
|