node/deps/v8/test/mjsunit/object-assign-regressions.js
Michaël Zasso 9d7cd9b864
deps: update V8 to 12.8.374.13
PR-URL: https://github.com/nodejs/node/pull/54077
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
2024-08-16 16:03:01 +02:00

24 lines
775 B
JavaScript

// Copyright 2024 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
(function() {
let obj = {};
// Add a property
Object.defineProperty(obj, "__proto__", { enumerable: true, writable: true });
// Adds side-step from {__proto__} -> {}
Object.assign({}, obj);
// Generalizes {__proto__}
Object.defineProperty(obj, "__proto__", { value: 0 });
})();
// TODO(olivf): Ensure object assign fastcase protects the object prototype.
// (function() {
// var a = {};
// a.x = 42;
// Object.assign({}, a);
// Object.defineProperty(Object.prototype, "x", {set(v) {}});
// assertTrue(Object.assign({}, a).x === undefined);
// })();