From 6a8df073850b4855c833ac488a756bf189d82340 Mon Sep 17 00:00:00 2001
From: wolfbeast <mcwerewolf@wolfbeast.com>
Date: Mon, 17 Jun 2019 00:38:02 +0000
Subject: Fix typo in ArrayShiftMoveElements

---
 js/src/jsarray.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/jsarray.cpp b/js/src/jsarray.cpp
index 0cd46ea36..20284a047 100644
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -2113,7 +2113,7 @@ js::ArrayShiftMoveElements(NativeObject* obj)
      * decremented and the result fetched, so just shift the array elements
      * themselves.
      */
-    obj->moveDenseElementsNoPreBarrier(0, 1, initlen - 1);
+    obj->moveDenseElementsNoPreBarrier(0, 1, initlen);
 }
 
 static inline void
-- 
cgit v1.2.3