src/third_party/mozjs-45/js/src/jit-test/tests/arrays/too-long-array-splice.js

// |jit-test| allow-oom
// array.splice should throw if array.length is too large.

var length = 4294967295;
var array = new Array(length);
array.splice(100);