text: load("bf4b12814bc95f34eeb130127d8438ab.js");
  load("93fae755edd261212639eed30afa2ca4.js");
  // Copyright (C) 2016 the V8 project authors. All rights reserved.
  // This code is governed by the BSD license found in the LICENSE file.
  /*---
  es6id: 22.1.3.26
  esid: sec-array.prototype.splice
  description: Abrupt completion from `constructor` property access
  info: |
      [...]
      9. Let A be ? ArraySpeciesCreate(O, actualDeleteCount).
      [...]
  
      9.4.2.3 ArraySpeciesCreate
  
      [...]
      5. Let C be ? Get(originalArray, "constructor").
  ---*/
  
  var a = [];
  
  Object.defineProperty(a, 'constructor', {
    get: function() {
      throw new Test262Error();
    }
  });
  
  assert.throws(Test262Error, function() {
    a.splice();
  });
  