Deserialize typed array objects in targetRealm as well

annevk · domenic · commit d5f63d26ce4b · 2017-04-18T09:47:19.000-04:00
Spotted in tc39/ecma262#418.
diff --git a/source b/source
@@ -8269,10 +8269,10 @@ o.myself = o;</pre>
      <var>serialized</var>.[[ByteLength]], and whose [[ByteOffset]] internal slot value is
      <var>serialized</var>.[[ByteOffset]].</p></li>
 
-     <li><p>Otherwise, set <var>value</var> to a new typed array object, using the constructor given by
-     <var>input</var>.[[Constructor]], whose [[ViewedArrayBuffer]] internal slot value is
-     <var>deserializedArrayBuffer</var>, whose [[TypedArrayName]] internal slot value is
-     <var>input</var>.[[Constructor]], whose [[ByteLength]] internal slot value is
+     <li><p>Otherwise, set <var>value</var> to a new typed array object in <var>targetRealm</var>,
+     using the constructor given by <var>input</var>.[[Constructor]], whose [[ViewedArrayBuffer]]
+     internal slot value is <var>deserializedArrayBuffer</var>, whose [[TypedArrayName]] internal
+     slot value is <var>input</var>.[[Constructor]], whose [[ByteLength]] internal slot value is
      <var>serialized</var>.[[ByteLength]], whose [[ByteOffset]] internal slot value is
      <var>serialized</var>.[[ByteOffset]], and whose [[ArrayLength]] internal slot value is
      <var>serialized</var>.[[ArrayLength]].</p></li>
