archives

« Bugzilla Issues Index

#3537 — 22.1.3.25 Array.prototype.splice, 22.1.3.28 Array.prototype.unshift: Incorrect bounds check


22.1.3.25 Array.prototype.splice (start, deleteCount , ...items )

Step 12: Change `≥` to `>`

Also: `len + insertCount - actualDeleteCount` instead of `len + insertCount + actualDeleteCount`


22.1.3.28 Array.prototype.unshift ( ...items )

Step 7.a: Change `≥` to `>`


fixed in rev31 editor's draft


In Rev31