Fix Array.prototype.splice() deletecount calculation

JerryScript-DCO-1.0-Signed-off-by: Zsolt Borbély zsborbely.u-szeged@partner.samsung.com
2015-07-20 09:01:36 +02:00
parent 64c81cc44d
commit 33be4883a2
2 changed files with 25 additions and 8 deletions
@@ -1462,6 +1462,11 @@ ecma_builtin_array_prototype_object_splice (ecma_value_t this_arg, /**< this arg
        else
        {
          delete_count = ecma_number_is_infinity (delete_num) ? len : ecma_number_to_uint32 (delete_num);
+
+          if (delete_count > len - start)
+          {
+            delete_count = len - start;
+          }
        }
      }
      else