// Copyright 2023 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

{
  const rab = new ArrayBuffer(1, {maxByteLength: 2});
  const ta = new Int8Array(rab, 0, 1);
  function ctor() {
    return ta;
  }
  ctor[Symbol.species] = ctor;
  ta.constructor = ctor;
  assertThrows(() => { ta.map(_ => rab.resize(0)); });
}

{
  const ab = new ArrayBuffer(1);
  const ta1 = new Int8Array(ab, 0, 1);

  const rab = new ArrayBuffer(1, {maxByteLength: 2});
  const ta2 = new Int8Array(rab, 0, 1);

  function ctor() {
    return ta2;
  }
  ctor[Symbol.species] = ctor;
  ta1.constructor = ctor;
  ta1.map(_ => rab.resize(0));
}