Deserialize typed array objects in targetRealm as well

Spotted in tc39/ecma262#418.
HTMLParseErrorWG · May 9, 2017 · c882497 · c882497
1 parent 71d05d1
commit c882497
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/source b/source
@@ -8269,10 +8269,10 @@ o.myself = o;</pre>
      <var>serialized</var>.[[ByteLength]], and whose [[ByteOffset]] internal slot value is
      <var>serialized</var>.[[ByteOffset]].</p></li>
 
-     <li><p>Otherwise, set <var>value</var> to a new typed array object, using the constructor given by
-     <var>input</var>.[[Constructor]], whose [[ViewedArrayBuffer]] internal slot value is
-     <var>deserializedArrayBuffer</var>, whose [[TypedArrayName]] internal slot value is
-     <var>input</var>.[[Constructor]], whose [[ByteLength]] internal slot value is
+     <li><p>Otherwise, set <var>value</var> to a new typed array object in <var>targetRealm</var>,
+     using the constructor given by <var>input</var>.[[Constructor]], whose [[ViewedArrayBuffer]]
+     internal slot value is <var>deserializedArrayBuffer</var>, whose [[TypedArrayName]] internal
+     slot value is <var>input</var>.[[Constructor]], whose [[ByteLength]] internal slot value is
      <var>serialized</var>.[[ByteLength]], whose [[ByteOffset]] internal slot value is
      <var>serialized</var>.[[ByteOffset]], and whose [[ArrayLength]] internal slot value is
      <var>serialized</var>.[[ArrayLength]].</p></li>