| // Copyright 2018 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| // Flags: --allow-natives-syntax --no-stress-opt |
| |
| // This tests the interaction between the MapIterator protector and SetIterator |
| // protector. |
| |
| var map = new Map([[1,2], [2,3], [3,4]]); |
| assertTrue(%MapIteratorProtector()); |
| |
| var set = new Set([1,2,3]); |
| assertTrue(%SetIteratorProtector()); |
| |
| // This changes %IteratorPrototype%. No more tests should be run after this in |
| // the same instance. |
| var iterator = map.keys(); |
| // iterator object --> %MapIteratorPrototype% --> %IteratorPrototype% |
| iterator.__proto__.__proto__[Symbol.iterator] = |
| () => ({next: () => ({done: true})}); |
| |
| assertFalse(%MapIteratorProtector()); |
| assertEquals([[1,2], [2,3], [3,4]], [...map]); |
| assertEquals([], [...map.entries()]); |
| assertEquals([], [...map.keys()]); |
| assertEquals([], [...map.values()]); |
| assertEquals([], [...iterator]); |
| |
| assertFalse(%SetIteratorProtector()); |
| assertEquals([1,2,3], [...set]); |
| assertEquals([], [...set.entries()]); |
| assertEquals([], [...set.keys()]); |
| assertEquals([], [...set.values()]); |