Fix some more missing ToObject on Array.prototype.
authormstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 30 Apr 2014 08:52:00 +0000 (08:52 +0000)
committermstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 30 Apr 2014 08:52:00 +0000 (08:52 +0000)
commit129c58c47d7f0cb1d4e25d41653547c64a376bfd
tree06fad71c864f25ce0227a68180286d9445ad846f
parent7d5120389027aed26800cdc6011c70ef5ab2cd39
Fix some more missing ToObject on Array.prototype.

R=mvstanton@chromium.org
BUG=

Review URL: https://codereview.chromium.org/254103002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21077 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/array.js
test/mjsunit/regress/regress-builtinbust-6.js