Merge changes up to V8 version 2.1.3 into the partial snapshots

test/mjsunit/array-slice.js

Index: test/mjsunit/array-slice.js
===================================================================
--- test/mjsunit/array-slice.js	(revision 3964)
+++ test/mjsunit/array-slice.js	(working copy)
@@ -36,6 +36,17 @@
 })();
 
 
+// Check various variants of empty array's slicing.
+(function() {
+  for (var i = 0; i < 7; i++) {
+    assertEquals([], [].slice(0, 0));
+    assertEquals([], [].slice(1, 0));
+    assertEquals([], [].slice(0, 1));
+    assertEquals([], [].slice(-1, 0));
+  }
+})();
+
+
 // Check various forms of arguments omission.
 (function() {
   var array = new Array(7);