Migrate crashing tests from blink repository.

test/webkit/array-splice-expected.txt

Index: test/webkit/array-splice-expected.txt
diff --git a/test/webkit/fast/js/stack-overflow-arrity-catch-expected.txt b/test/webkit/array-splice-expected.txt
similarity index 73%
copy from test/webkit/fast/js/stack-overflow-arrity-catch-expected.txt
copy to test/webkit/array-splice-expected.txt
index 80df97e671a7b0a1815352f940bf0e6205a744eb..800f2cdfe30bb4ca24c6623a63a21c1c05636e01 100644
--- a/test/webkit/fast/js/stack-overflow-arrity-catch-expected.txt
+++ b/test/webkit/array-splice-expected.txt
@@ -21,12 +21,32 @@
 # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-Test that if an arrity check causes a stack overflow, the exception goes to the right catch
+This tests array.splice behavior.
 
 On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
 
 
-PASS gotRightCatch is true
+PASS arr is ['a','b','c','d']
+PASS arr.splice(2) is ['c','d']
+PASS arr is ['a','b']
+PASS arr.splice(0) is ['a','b']
+PASS arr is []
+PASS arr.splice() is []
+PASS arr is ['a','b','c','d']
+PASS arr.splice(undefined) is ['a','b','c','d']
+PASS arr is []
+PASS arr.splice(null) is ['a','b','c','d']
+PASS arr is []
+PASS arr.splice(100) is []
+PASS arr is ['a','b','c','d']
+PASS arr.splice(-1) is ['d']
+PASS arr is ['a','b','c']
+PASS arr.splice(2, undefined) is []
+PASS arr.splice(2, null) is []
+PASS arr.splice(2, -1) is []
+PASS arr is ['a','b','c']
+PASS arr.splice(2, 100) is ['c']
+PASS arr is ['a','b']
 PASS successfullyParsed is true
 
 TEST COMPLETE