From 9153838ea299da3bd00767394ff021318c1e0f12 Mon Sep 17 00:00:00 2001
From: wolfbeast <mcwerewolf@wolfbeast.com>
Date: Mon, 17 Jun 2019 15:09:05 +0000
Subject: Fix typo in ArrayShiftMoveElements

---
 js/src/jsarray.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'js/src')

diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
index 9abc99e347..7af7c98001 100644
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -2120,7 +2120,7 @@ js::ArrayShiftMoveElements(NativeObject* obj)
      * decremented and the result fetched, so just shift the array elements
      * themselves.
      */
-    obj->moveDenseElementsNoPreBarrier(0, 1, initlen - 1);
+    obj->moveDenseElementsNoPreBarrier(0, 1, initlen);
 }
 
 static inline void
-- 
cgit v1.2.3