Fix a special case (zero length result array).

test/mjsunit/array-slice.js

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 18 matching lines @@
 (function() {
   var array = new Array(10);
   for (var i = 0; i < 7; i++) {
     var sliced = array.slice();
     assertEquals(array.length, sliced.length);
     assertFalse(0 in sliced);
   }
 })();
 
 
+// Check various variants of empty array's slicing.
+(function() {
+  for (var i = 0; i < 7; i++) {
+    assertEquals([], [].slice(0, 0));
+    assertEquals([], [].slice(1, 0));
+    assertEquals([], [].slice(0, 1));
+    assertEquals([], [].slice(-1, 0));
+  }
+})();
+
+
 // Check various forms of arguments omission.
 (function() {
   var array = new Array(7);
 
   for (var i = 0; i < 7; i++) {
     assertEquals(array, array.slice());
     assertEquals(array, array.slice(0));
     assertEquals(array, array.slice(undefined));
     assertEquals(array, array.slice("foobar"));
     assertEquals(array, array.slice(undefined, undefined));
@@ skipping 104 matching lines @@
     // ... but keeps the rest as holes:
     Array.prototype[5] = "@5";
     assertEquals(array[5], Array.prototype[5]);
     assertFalse(array.hasOwnProperty(5));
     assertEquals(sliced[5], Array.prototype[5]);
     assertFalse(sliced.hasOwnProperty(5));
 
     assertTrue(delete Array.prototype[5]);
   }
 })();