JSTests/test262/test/built-ins/RegExp/prototype/Symbol.replace/result-get-length-err.js

// Copyright (C) 2015 the V8 project authors. All rights reserved.
// This code is governed by the BSD license found in the LICENSE file.

/*---
description: >
    Behavior when error is thrown while accessing `length` property of result
es6id: 21.2.5.8
info: |
    [...]
    13. Repeat, while done is false
        a. Let result be RegExpExec(rx, S).
        [...]
    16. Repeat, for each result in results,
        a. Let nCaptures be ToLength(Get(result, "length")).
        b. ReturnIfAbrupt(nCaptures).
features: [Symbol.replace]
---*/

var r = /./;
var poisonedLength = {
  get length() {
    throw new Test262Error();
  }
};
r.exec = function() {
  return poisonedLength;
};

assert.throws(Test262Error, function() {
  r[Symbol.replace]('a', 'b');
});