Arguments object doesn't handle mutation of length property correctly
Created attachment 119095 [details] Patch
Committed r102709: <http://trac.webkit.org/changeset/102709>