SES: Repair v8 Array methods getting implicit this=window. https://codereview.appspot.com/10711045
SES: Repair v8 Array methods getting implicit this=window.
https://codereview.appspot.com/10711045

Fixes <http://code.google.com/p/v8/issues/detail?id=2758>.

Array.prototype.{pop, push, shift, unshift, slice, splice, concat} are
wrapped if they are not already wrapped by other repairs.

Future work after this security patch is deployed:
* We should have an independent test and repair for each method to avoid
  unnecessary wrappers and the subtest() gimmick; this change was
  written before programmatically generated repairs were considered.
* es53-test-scan-guest should be extended to detect this category of
  problems.

R=erights@gmail.com, ihab.awad@gmail.com


git-svn-id: eb21526166532bd3afc2c1499c0cf105ce815f5a@5550 360991c0-9f3b-0410-ba87-8b362a00edf4

googlearchive/caja,jasvir/caja,initaldk/caja,jasvir/caja,googlearchive/caja,cepm-nate/caja,wishabi/caja-1,wishabi/caja-1,wishabi/caja-1,cepm-nate/caja,googlearchive/caja,initaldk/caja,cepm-nate/caja,jasvir/caja,wishabi/caja-1,googlearchive/caja,wishabi/caja-1,googlearchive/caja,cepm-nate/caja,jasvir/caja,initaldk/caja,cepm-nate/caja,jasvir/caja,cepm-nate/caja,initaldk/caja,wishabi/caja-1,initaldk/caja,googlearchive/caja,initaldk/caja,jasvir/caja