Backed out changeset 97d2c33271e8 due to crashtest failures

js/src/jsarray.cpp

@@ -2338,7 +2338,6 @@ array_splice(JSContext *cx, uintN argc, Value *vp)
     JSObject *obj = ComputeThisFromVp(cx, vp);
     if (!obj || !js_GetLengthProperty(cx, obj, &length))
         return JS_FALSE;
-    jsuint origlength = length;
 
     /* Convert the first argument into a starting index. */
     jsdouble d;
@@ -2453,9 +2452,6 @@ array_splice(JSContext *cx, uintN argc, Value *vp)
         length -= delta;
     }
 
-    if (length < origlength && !js_SuppressDeletedIndexProperties(cx, obj, length, origlength))
-        return JS_FALSE;
-
     /*
      * Copy from argv into the hole to complete the splice, and update length in
      * case we deleted elements from the end.