Merge 104736 - [v8] Int16Array.set(array, offset) fails on first execution

Source/WebCore/bindings/v8/custom/V8ArrayBufferViewCustom.cpp

Index: Source/WebCore/bindings/v8/custom/V8ArrayBufferViewCustom.cpp
===================================================================
--- Source/WebCore/bindings/v8/custom/V8ArrayBufferViewCustom.cpp	(revision 104771)
+++ Source/WebCore/bindings/v8/custom/V8ArrayBufferViewCustom.cpp	(working copy)
@@ -58,12 +58,18 @@
 }
 
 
-void copyElements(v8::Handle<v8::Object> destArray, v8::Handle<v8::Object> srcArray)
+void copyElements(v8::Handle<v8::Object> destArray, v8::Handle<v8::Object> srcArray, uint32_t offset)
 {
     v8::Handle<v8::String> key = v8::String::New("set");
     v8::Handle<v8::Function> set = destArray->Get(key).As<v8::Function>();
-    v8::Handle<v8::Value> argument = srcArray;
-    set->Call(destArray, 1, &argument);
+    v8::Handle<v8::Value> arguments[2];
+    int numberOfArguments = 1;
+    arguments[0] = srcArray;
+    if (offset) {
+        arguments[1] = v8::Uint32::New(offset);
+        numberOfArguments = 2;
+    }
+    set->Call(destArray, numberOfArguments, arguments);
 }
 
 }