too-long-array-splice.js (265B)
1 // |jit-test| allow-oom 2 // array.splice should throw if array.length is too large. 3 4 var length = 4294967295; 5 var array = new Array(length); 6 7 // Disable any fast paths by adding an indexed property on the prototype chain. 8 Array.prototype[0] = 0; 9 10 array.splice(100);