test262 icon indicating copy to clipboard operation
test262 copied to clipboard

Missing coverage: Resizable / Growable (Shared)ArrayBuffers: Bounds checking in TypedArray.prototype.set

Open marjakh opened this issue 3 years ago • 0 comments

We don't seem to have test for the more complicated cases, e.g:

create resizable array buffer size 4, max 8 create length-tracking TypedArray (assuming 1-byte elements for this pseudo code) resize buffer to 3 myTa.set([... ]) << too big array

I noticed this since I got my V8 implementation to a state where all TypedArray.prototype.set-related tests are passing, but I still didn't have RAB / GSAB support for the code path which computes the offset validity in this case.

cc @syg @sarahghp

marjakh avatar Jan 24 '22 17:01 marjakh