User Agent: Mozilla/5.0 (X11; Linux i686; rv:5.0) Gecko/20100101 Firefox/5.0
Build ID: 20110615151330
Steps to reproduce:
whilst creating a specific list for my purposes I encountered a problem. I stripped everything and my final reproduction code looks like:
NPList.prototype = new Array;
list = new NPList();
alert(list.length + ' ' + list);
Which I believe should not happen.
I'm rewriting the splice code in bug 668024, so I'll look at this one.
This is a bug, expected results are exactly as Tomasz says. The good news is that that's the result my rewrite gives, so this will be fixed by bug 668024.
Thanks for the report and the minimized test case Tomasz!