From 1989f0fe6ddc1bb38d02c92ce787ae1161d12cbf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Bargull?= <andre.bargull@gmail.com>
Date: Tue, 30 Jan 2018 16:29:19 +0100
Subject: [PATCH] Add test case for tc39/ecma262#1009 (#1240)

---
 ...d-when-species-retrieved-different-type.js | 61 ++++++++++++++++++
 ...tached-when-species-retrieved-same-type.js | 64 +++++++++++++++++++
 2 files changed, 125 insertions(+)
 create mode 100644 test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-different-type.js
 create mode 100644 test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-same-type.js

diff --git a/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-different-type.js b/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-different-type.js
new file mode 100644
index 0000000000..8ee2fba54b
--- /dev/null
+++ b/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-different-type.js
@@ -0,0 +1,61 @@
+// Copyright (C) 2017 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-typedarray-typedarray
+description: >
+    When a TypedArray is created from another TypedArray with a different element-type
+    and SpeciesConstructor detaches the source buffer, AllocateArrayBuffer is still
+    executed.
+info: |
+    22.2.4.3 TypedArray ( typedArray )
+
+    ...
+    16. If IsSharedArrayBuffer(srcData) is false, then
+        a. Let bufferConstructor be ? SpeciesConstructor(srcData, %ArrayBuffer%).
+    ...
+    18. If SameValue(elementType, srcType) is true, then
+        ...
+    19. Else,
+        a. Let data be ? AllocateArrayBuffer(bufferConstructor, byteLength).
+        b. If IsDetachedBuffer(srcData) is true, throw a TypeError exception.
+    ...
+
+    24.1.1.1 AllocateArrayBuffer ( constructor, byteLength )
+
+    1. Let obj be ? OrdinaryCreateFromConstructor(constructor, "%ArrayBufferPrototype%",
+       « [[ArrayBufferData]], [[ArrayBufferByteLength]] »).
+    ...
+includes: [testTypedArray.js, detachArrayBuffer.js]
+features: [TypedArray, Symbol.species]
+---*/
+
+testWithTypedArrayConstructors(function(TA) {
+    var speciesCallCount = 0;
+    var bufferConstructor = Object.defineProperty({}, Symbol.species, {
+        get: function() {
+            speciesCallCount += 1;
+            $DETACHBUFFER(ta.buffer);
+            return speciesConstructor;
+        }
+    });
+
+    var prototypeCallCount = 0;
+    var speciesConstructor = Object.defineProperty(function(){}.bind(), "prototype", {
+        get: function() {
+            prototypeCallCount += 1;
+            return null;
+        }
+    });
+
+    var ta = new TA(0);
+    ta.buffer.constructor = bufferConstructor;
+
+    assert.throws(TypeError, function() {
+        var targetType = TA !== Int32Array ? Int32Array : Uint32Array;
+        new targetType(ta);
+    }, "TypeError thrown for detached source buffer");
+
+    assert.sameValue(speciesCallCount, 1, "@@species getter called once");
+    assert.sameValue(prototypeCallCount, 1, "prototype getter called once");
+});
diff --git a/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-same-type.js b/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-same-type.js
new file mode 100644
index 0000000000..978f42af64
--- /dev/null
+++ b/test/built-ins/TypedArrays/typedarray-arg-detached-when-species-retrieved-same-type.js
@@ -0,0 +1,64 @@
+// Copyright (C) 2017 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-typedarray-typedarray
+description: >
+    When a TypedArray is created from another TypedArray with the same element-type
+    and SpeciesConstructor detaches the source buffer, AllocateArrayBuffer is still
+    executed.
+info: |
+    22.2.4.3 TypedArray ( typedArray )
+
+    ...
+    16. If IsSharedArrayBuffer(srcData) is false, then
+        a. Let bufferConstructor be ? SpeciesConstructor(srcData, %ArrayBuffer%).
+    ...
+    18. If SameValue(elementType, srcType) is true, then
+        a. Let data be ? CloneArrayBuffer(srcData, srcByteOffset, byteLength, bufferConstructor).
+    ...
+
+    24.1.1.4 CloneArrayBuffer ( srcBuffer, srcByteOffset, srcLength, cloneConstructor )
+
+    ...
+    3. Let targetBuffer be ? AllocateArrayBuffer(cloneConstructor, srcLength).
+    4. If IsDetachedBuffer(srcBuffer) is true, throw a TypeError exception.
+    ...
+
+    24.1.1.1 AllocateArrayBuffer ( constructor, byteLength )
+
+    1. Let obj be ? OrdinaryCreateFromConstructor(constructor, "%ArrayBufferPrototype%",
+       « [[ArrayBufferData]], [[ArrayBufferByteLength]] »).
+    ...
+includes: [testTypedArray.js, detachArrayBuffer.js]
+features: [TypedArray, Symbol.species]
+---*/
+
+testWithTypedArrayConstructors(function(TA) {
+    var speciesCallCount = 0;
+    var bufferConstructor = Object.defineProperty({}, Symbol.species, {
+        get: function() {
+            speciesCallCount += 1;
+            $DETACHBUFFER(ta.buffer);
+            return speciesConstructor;
+        }
+    });
+
+    var prototypeCallCount = 0;
+    var speciesConstructor = Object.defineProperty(function(){}.bind(), "prototype", {
+        get: function() {
+            prototypeCallCount += 1;
+            return null;
+        }
+    });
+
+    var ta = new TA(0);
+    ta.buffer.constructor = bufferConstructor;
+
+    assert.throws(TypeError, function() {
+        new TA(ta);
+    }, "TypeError thrown for detached source buffer");
+
+    assert.sameValue(speciesCallCount, 1, "@@species getter called once");
+    assert.sameValue(prototypeCallCount, 1, "prototype getter called once");
+});
-- 
GitLab