| // Copyright 2015 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| // Flags: --allow-natives-syntax |
| function store(o, i, v) { |
| o.__proto__[10000000] = 1; |
| Object.defineProperty(o, '3', { |
| var o = new Int32Array(1); |
| () => Object.defineProperty(o, '0', {get: function() {}}), TypeError); |
| {value: 0, writable: true, enumerable: true, configurable: false}, |
| Object.getOwnPropertyDescriptor(o, '0')); |
| %PrepareFunctionForOptimization(f); |
| %OptimizeFunctionOnNextCall(f); |
| assertEquals(3, a.length); |