Bug 970285 -- Detect negative lengths supplied to unsized array constructor r=shu