Bug 430717: fix lookup of incorrect ID when delegating to prototype for hole in dense array. r=mrbkap, a=mconnor.

js/src/jsinterp.c

@@ -4532,6 +4532,9 @@ interrupt:
                         rval = obj->dslots[i];
                         if (rval != JSVAL_HOLE)
                             goto end_getelem;
+
+                        /* Reload rval from the stack in the rare hole case. */
+                        rval = FETCH_OPND(-1);
                     }
                 }
                 id = INT_JSVAL_TO_JSID(rval);