Bug 933475 - Rewrite Array.prototype.push fast path to work on all native objects with dense elements. r=Waldo