[PATCH v2 0/1] MR3567: jscript: handle Array.prototype.splice with omitted deleteCount