| // Copyright 2014 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| Object.defineProperty(Array.prototype, '0', { |
| get: function() { return false; }, |
| }); |
| var a = [1, 2, 3]; |
| assertEquals(a, a.slice()); |
| assertEquals([3], a.splice(2, 1)); |
| |
| a = [1, 2, 3]; |
| a[0xffff] = 4; |
| // nulling the prototype lets us stay in the sparse case; otherwise the |
| // getter on Array.prototype would force us into the non-sparse code. |
| a.__proto__ = null; |
| assertEquals(a, Array.prototype.slice.call(a)); |
| assertEquals([3], Array.prototype.splice.call(a, 2, 1)); |
