ES6: Array.prototype.slice and friends should use ToLength instead of ToUint32

src/object-observe.js

Index: src/object-observe.js
diff --git a/src/object-observe.js b/src/object-observe.js
index 0f1f6d37fbadab8acd1b12968fed89e70a93f62c..aba4e1024358e51b707846601fbff20ed004289f 100644
--- a/src/object-observe.js
+++ b/src/object-observe.js
@@ -693,11 +693,10 @@ $observeArrayMethods = [
 
 // TODO(adamk): Figure out why this prototype removal has to
 // happen as part of initial snapshotting.
-var removePrototypeFn = function(f, i) {
-  if (i % 2 === 1) %FunctionRemovePrototype(f);
-};
-$observeObjectMethods.forEach(removePrototypeFn);
-$observeArrayMethods.forEach(removePrototypeFn);
+for (var i = 0; i < $observeObjectMethods.length; i++)

[Camillo Bruni, 2015/09/08 07:10:34]

I presume these are accidental changes?

[aperez, 2015/09/09 12:48:43]

Same here, now with the macro is possible to avoid this change.

+  if (i % 2 === 1) %FunctionRemovePrototype($observeObjectMethods[i]);
+for (var i = 0; i < $observeArrayMethods.length; i++)
+  if (i % 2 === 1) %FunctionRemovePrototype($observeArrayMethods[i]);
 
 $observeEnqueueSpliceRecord = EnqueueSpliceRecord;
 $observeBeginPerformSplice = BeginPerformSplice;