Reviewed by Geoffrey Garen.

        Missing call to popTempSortVector() for exception case in JSArray::sort.
        https://bugs.webkit.org/show_bug.cgi?id=50718

        Fix to patch of 50718 that added pushTempSortVector() and 
        popTempSortVector() to JSArray::sort() to mark elements during sort.
        Need to add popTempSortVector() for the return case if toString()
        had an exception.

        * runtime/JSArray.cpp:
        (JSC::JSArray::sort): Added popTempSortVector()
2011-01-11  Michael Saboff  <msaboff@apple.com>

        Reviewed by Geoffrey Garen.

        Missing call to popTempSortVector() for exception case in JSArray::sort.
        https://bugs.webkit.org/show_bug.cgi?id=50718

        New test to validate balanced calls to pushTempSortVector() and
        popTempSortVector().

        * fast/js/array-sort-exception-expected.txt: Added.
        * fast/js/array-sort-exception.html: Added.
        * fast/js/script-tests/array-sort-exception.js: Added.
        (do_gc):
        (Item):
        (toString_throw):
        (test):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@75531 268f45cc-cd09-0410-ab3c-d52691b4dbfc