| Index: src/builtins.cc
|
| diff --git a/src/builtins.cc b/src/builtins.cc
|
| index 5ae9a5e94f5107c35a53861d63ae43b23ab38d46..a84d15015c4e3aa01ea5f7cb2cf780b42ad80249 100644
|
| --- a/src/builtins.cc
|
| +++ b/src/builtins.cc
|
| @@ -371,8 +371,7 @@ BUILTIN(ArrayPush) {
|
| }
|
| DCHECK(!array->map()->is_observed());
|
| ElementsAccessor* accessor = array->GetElementsAccessor();
|
| - int new_length = accessor->Push(array, elms_obj, &args[1], push_size,
|
| - ElementsAccessor::kDirectionReverse);
|
| + int new_length = accessor->Push(array, elms_obj, &args, push_size);
|
| return Smi::FromInt(new_length);
|
| }
|
|
|
| @@ -622,7 +621,7 @@ BUILTIN(ArraySplice) {
|
| }
|
| ElementsAccessor* accessor = array->GetElementsAccessor();
|
| Handle<JSArray> result_array = accessor->Splice(
|
| - array, elms_obj, actual_start, actual_delete_count, args, add_count);
|
| + array, elms_obj, actual_start, actual_delete_count, &args, add_count);
|
| return *result_array;
|
| }
|
|
|
|
|