[regexp][liveedit] Fix inconsistent JSArrays

src/debug/liveedit.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/debug/liveedit.h"
 
 #include "src/ast/scopes.h"
 #include "src/code-stubs.h"
 #include "src/compilation-cache.h"
 #include "src/compiler.h"
@@ skipping 1714 matching lines @@
     Handle<JSArray> old_shared_array, Handle<JSArray> new_shared_array,
     bool do_drop) {
   Isolate* isolate = old_shared_array->GetIsolate();
   int len = GetArrayLength(old_shared_array);
 
   DCHECK(old_shared_array->HasFastElements());
   Handle<FixedArray> old_shared_array_elements(
       FixedArray::cast(old_shared_array->elements()));
 
   Handle<JSArray> result = isolate->factory()->NewJSArray(len);
+  result->set_length(Smi::FromInt(len));
   JSObject::EnsureWritableFastElements(result);
   Handle<FixedArray> result_elements =
       handle(FixedArray::cast(result->elements()), isolate);
 
   // Fill the default values.
   for (int i = 0; i < len; i++) {
     FunctionPatchabilityStatus status = FUNCTION_AVAILABLE_FOR_PATCH;
     result_elements->set(i, Smi::FromInt(status));
   }
 
@@ skipping 177 matching lines @@
     scope_info_length++;
 
     current_scope = current_scope->outer_scope();
   }
 
   return scope_info_list;
 }
 
 }  // namespace internal
 }  // namespace v8