Corrects Array.prototype.splice delete exceeding len. Fixes #611