Fix max length check in ArrayPrototype.js' concatSlowPath().