RegExpObject's collectMatches should not be using JSArray::push to fill in its match...