Fix array concat function with array argument

Fix a minor typo: we need to get the length of the argument instead
of the length of the `this`.

One related test262 test: ch15/15.4/15.4.4/15.4.4.4/S15.4.4.4_A1_T2.js

JerryScript-DCO-1.0-Signed-off-by: Peter Gal [email protected]

Author: galpeter

jerry-core/ecma/builtin-objects/ecma-builtin-array-prototype.cpp

@@ -146,7 +146,7 @@ ecma_builtin_array_prototype_object_concat (ecma_value_t this_arg, /**< this arg
                       ecma_op_object_get (ecma_get_object_from_value (args[arg_index]),
                                           magic_string_length_p),
                       ret_value);
-      ECMA_OP_TO_NUMBER_TRY_CATCH (arg_len_number, len_value, ret_value);
+      ECMA_OP_TO_NUMBER_TRY_CATCH (arg_len_number, arg_len_value, ret_value);
 
       uint32_t arg_len = ecma_number_to_uint32 (arg_len_number);
 

tests/jerry/array-prototype-concat.js

@@ -23,19 +23,20 @@ for (i = 0; i < array.length; i++) {
 
 var obj = {};
 var arr1 = ["Apple", 6, "Peach"];
-var arr2 = [obj, "Cherry", "Grape"];
+var arr2 = [obj, "Cherry", "Grape", 88];
 
 var new_array = arr1.concat(arr2, obj, 1);
 
-assert(new_array.length === 8);
+assert(new_array.length === 9);
 assert(new_array[0] === "Apple");
 assert(new_array[1] === 6);
 assert(new_array[2] === "Peach");
 assert(new_array[3] === obj);
 assert(new_array[4] === "Cherry");
 assert(new_array[5] === "Grape");
-assert(new_array[6] === obj);
-assert(new_array[7] === 1);
+assert(new_array[6] === 88);
+assert(new_array[7] === obj);
+assert(new_array[8] === 1);
 
 // Checking behavior when unable to get length
 var obj = { concat : Array.prototype.concat }