Revert 22595: "Keep new arrays allocated with 'new Array(N)' in fast mode"

test/mjsunit/array-splice.js

Index: test/mjsunit/array-splice.js
diff --git a/test/mjsunit/array-splice.js b/test/mjsunit/array-splice.js
index 03afac3ec4cdbe6795c8090e9262abbbd1204d48..be2b1064e6a12f49d00e713a42b126a4eb45c485 100644
--- a/test/mjsunit/array-splice.js
+++ b/test/mjsunit/array-splice.js
@@ -25,8 +25,6 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-// Flags: --allow-natives-syntax
-
 // Check that splicing array of holes keeps it as array of holes
 (function() {
   for (var i = 0; i < 7; i++) {
@@ -359,9 +357,7 @@
 (function() {
   for (var i = 0; i < 7; i++) {
     try {
-      var a = %NormalizeElements([]);
-      a.length = Math.pow(2, 32) - 3;
-      a.splice(-1, 0, 1, 2, 3, 4, 5);
+      new Array(Math.pow(2, 32) - 3).splice(-1, 0, 1, 2, 3, 4, 5);
       throw 'Should have thrown RangeError';
     } catch (e) {
       assertTrue(e instanceof RangeError);
@@ -369,8 +365,7 @@
 
     // Check smi boundary
     var bigNum = (1 << 30) - 3;
-    var array = %NormalizeElements([]);
-    array.length = bigNum;
+    var array = new Array(bigNum);
     array.splice(-1, 0, 1, 2, 3, 4, 5, 6, 7);
     assertEquals(bigNum + 7, array.length);
   }