Increase test coverage: Array.prototype.splice

Branch coverage:
   Before: 56/78
   After: 78/78

Also corrected a mistake, that "else if" branch is not needed, should be replaced with an "else".

JerryScript-DCO-1.0-Signed-off-by: Mate Dabis mdabis@inf.u-szeged.hu

Author: matedabis

jerry-core/ecma/builtin-objects/ecma-builtin-array-prototype.c

@@ -1378,8 +1378,9 @@ ecma_builtin_array_prototype_object_splice (ecma_value_t this_arg, /**< this arg
       }
     }
     /* 13. */
-    else if (item_count > delete_count)
+    else
     {
+      JERRY_ASSERT (item_count > delete_count);
       /* 13.b */
       for (k = len - delete_count; k > start  && ecma_is_value_empty (ret_value); k--)
       {

tests/jerry/array-prototype-splice.js

@@ -175,3 +175,174 @@ try {
   assert (e.message === "foo");
   assert (e instanceof ReferenceError);
 }
+
+try {
+  Array.prototype.splice.call(undefined);
+  assert(false);
+} catch(e) {
+  assert(e instanceof TypeError);
+}
+
+try {
+  var o = {};
+  Object.defineProperty(o, 'toString', { 'get' : function() { throw new ReferenceError("foo"); } });
+  var a = { length : o }
+  Array.prototype.splice.call(a, function() { })
+  assert(false);
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+try {
+  var o = {};
+  Object.defineProperty(o, 'toString', { 'get' : function() { throw new ReferenceError("foo"); } });
+  [1,2].splice(o)
+  assert(false);
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+try {
+  var o = {};
+  Object.defineProperty(o, 'toString', { 'get' : function() { throw new ReferenceError("foo"); } });
+  [1,2].splice(1, o)
+  assert(false);
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+try {
+  var a = [1,5, ,2]
+  Object.defineProperty(a, '2', { 'get' : function() { throw new ReferenceError("foo"); } })
+  a.splice(1, 7, 7, 7,7,7)
+  assert(false)
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+var a = {length : 13}
+Array.prototype.splice.call(a, function () {delete a})
+assert(a.length === 0)
+
+try {
+  var a = [1,5,6,7,8,5]
+  Object.defineProperty(a, '1', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Object.defineProperty(a, '0', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Object.defineProperty(a, '2', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Array.prototype.splice.call(a, 0, 3)
+  assert(false)
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+try {
+  f = function() {delete arr[3]; arr.length = 13; Object.defineProperty(arr, '5', function() { })};
+  obj = {get: f, valueOf : f, toString: f}
+  arr = [1, 2, obj, 4, 5];
+  Object.defineProperty(arr, '2',{ 'get' : f } )
+  print(arr)
+  arr.splice(1, 4, obj);
+  print(arr)
+} catch(e) {}
+
+try {
+  f = function() { for(var i=0; i<arr.length; i++) { delete arr[i]} };
+  obj = {get: f, valueOf : f, toString: f}
+  arr = [1, 2, obj, 4, 5];
+  Object.defineProperty(arr, '0', { 'get' : f })
+  Object.defineProperty(arr, '1', { 'get' : f })
+  Object.defineProperty(arr, '2', { 'get' : f })
+  Object.defineProperty(arr, '3', { 'get' : f })
+  Object.defineProperty(arr, '4', { 'get' : f })
+  Object.defineProperty(arr, '5', { 'get' : f })
+  arr.splice(1, 3, obj);
+} catch(e) {}
+
+try {
+  f = function() { throw new TypeError;};
+  obj = {get: f, valueOf : f, toString: f}
+  arr = [1, 2, obj, 4, 5];
+  Object.defineProperty(arr, '4', { 'get' : f } )
+  arr.splice(1, 3, obj);
+} catch(e) {}
+
+try {
+  f = function() { for(var i=0; i<arr.length; i++) { delete arr[i]} };
+  f1 = function() { throw new TypeError;};
+  f2 = function() { delete arr[2];};
+  f3 = function() { delete arr[3];};
+  f4 = function() { delete arr[4];};
+  arr = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
+  delete arr[2];
+  delete arr[3];
+  Object.defineProperty(arr, '0', { 'get' : f })
+  Object.defineProperty(arr, '1', { 'get' : f })
+  Object.defineProperty(arr, '2', { 'get' : f })
+  Object.defineProperty(arr, '3', { 'get' : f })
+  Object.defineProperty(arr, '8', { 'get' : f2 })
+  Object.defineProperty(arr, '9', { 'get' : f3 })
+  Object.defineProperty(arr, '10', { 'get' : f4 })
+  arr.splice(1, 7, 5);
+} catch(e) {}
+
+try {
+  f = function() { for(var i=0; i<arr.length; i++) { delete arr[i]} };
+  f1 = function() { throw new TypeError;};
+  f2 = function() { delete arr[2];};
+  f3 = function() { delete arr[3];};
+  f4 = function() { delete arr[4];};
+  arr = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24];
+  delete arr[2];
+  delete arr[3];
+  Object.defineProperty(arr, '0', { 'get' : f })
+  Object.defineProperty(arr, '1', { 'get' : f })
+  Object.defineProperty(arr, '2', { 'get' : f })
+  Object.defineProperty(arr, '3', { 'get' : f })
+  Object.defineProperty(arr, '8', { 'get' : f2 })
+  Object.defineProperty(arr, '9', { 'get' : f3 })
+  Object.defineProperty(arr, '10', { 'get' : f4 })
+  arr.splice(1, 7, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5);
+} catch(e) {}
+
+try {
+  var a = [1, 5, 6, 7, 8, 5]
+  Object.defineProperty(a, '1', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Object.defineProperty(a, '0', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Object.defineProperty(a, '2', { 'get' : function() { throw new ReferenceError("foo"); } })
+  Array.prototype.splice.call(a, 0, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3)
+  assert(false)
+} catch(e) {
+  assert(e instanceof ReferenceError);
+}
+
+try {
+  f = function() {  for(var i=0; i<arr.length; i++) { delete arr[i]} };
+  arr = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24];
+  delete arr[22];
+  delete arr[23];
+  Object.defineProperty(arr, '21',{ 'get' : f })
+  Object.defineProperty(arr, '22',{ 'get' : f })
+  Object.defineProperty(arr, '23',{ 'get' : f })
+  arr.splice(1, 7, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5);
+} catch(e) {}
+
+try {
+  f = function () { throw new TypeError;};
+  arr = [1, 2, 4, 5];
+  Object.defineProperty(arr, '4',{ 'get' : f })
+  arr.splice(1, 2, 3, 4, 5, 6, 7, 8, 9, 10);
+} catch (e) {}
+
+try {
+  f = function () { delete arr[23];}
+  arr = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24];
+  delete arr[23];
+  Object.defineProperty(arr, '23',{ 'get' : f })
+  arr.splice(1, 7, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5);
+} catch (e) {}
+
+try {
+  arr = [];
+  Object.defineProperty(arr, 'length', { value : 999, writable: false })
+  arr.splice(1, 2, 4, 5);
+} catch(e) {}