Fix TypedArray construction with incorrect offset (#4075)

In case of a TypedArray the input `byteOffset` argument must be a multiple of the `BYTES_PER_ELEMENT` value. JerryScript-DCO-1.0-Signed-off-by: Peter Gal pgal.usz@partner.samsung.com
2020-07-27 20:05:51 +02:00
parent 435c9cadcf
commit 227007eda7
2 changed files with 39 additions and 1 deletions
@@ -1142,8 +1142,9 @@ ecma_op_create_typedarray (const ecma_value_t *arguments_list_p, /**< the arg li
        return ECMA_VALUE_ERROR;
      }

-      if (ecma_number_is_negative (offset))
+      if (ecma_number_is_negative (offset) || fmod (offset, (1 << element_size_shift)) != 0)
      {
+        /* ES2015 22.2.1.5: 9 - 10. */
        ret = ecma_raise_range_error (ECMA_ERR_MSG ("Invalid offset."));
      }
      else if (ecma_arraybuffer_is_detached (arraybuffer_p))