Fix JSON issue with arrays.

src/json.js

 // Copyright 2009 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 175 matching lines @@
   }
   if (!%PushIfAbsent(stack, value)) {
     throw MakeTypeError('circular_structure', $Array());
   }
   builder.push("[");
   var val = value[0];
   if (IS_STRING(val)) {
     // First entry is a string. Remaining entries are likely to be strings too.
     var array_string = %QuoteJSONStringArray(value);
     if (!IS_UNDEFINED(array_string)) {
-      builder[builder.length - 1] = array_string;     
+      // array_string also includes bracket characters so we are done.
+      builder[builder.length - 1] = array_string;
+      stack.pop();
+      return;
     } else {
       builder.push(%QuoteJSONString(val));
       for (var i = 1; i < len; i++) {
         val = value[i];
         if (IS_STRING(val)) {
           builder.push(%QuoteJSONStringComma(val));
         } else {
           builder.push(",");
           var before = builder.length;
           BasicJSONSerialize(i, val, stack, builder);
@@ skipping 128 matching lines @@
 }
 
 function SetupJSON() {
   InstallFunctions($JSON, DONT_ENUM, $Array(
     "parse", JSONParse,
     "stringify", JSONStringify
   ));
 }
 
 SetupJSON();