ES6: Array.prototype.slice and friends should use ToLength instead of ToUint32

src/heap/heap.h

Index: src/heap/heap.h
diff --git a/src/heap/heap.h b/src/heap/heap.h
index 97d32bbe9c5b417c9060fcf287f85aaef33a82cb..d879bc4b3c83d8cd14d167f815821df831b1281f 100644
--- a/src/heap/heap.h
+++ b/src/heap/heap.h
@@ -260,6 +260,7 @@ namespace internal {
   V(harmony_regexps_string, "harmony_regexps")                 \
   V(harmony_tostring_string, "harmony_tostring")               \
   V(harmony_unicode_regexps_string, "harmony_unicode_regexps") \
+  V(harmony_tolength_string, "harmony_tolength")               \
   V(input_string, "input")                                     \
   V(index_string, "index")                                     \
   V(last_index_string, "lastIndex")                            \