This bug is due to an email from Michael (Michael.Heinrichs@Sun.COM).

Please see the attached test case for detail.

For Polygon, the bug is introduced by the for loop in the following function implementation:

    function configShape():Path2D {
        // TODO: Should path be moved to a class variable?
        var path = new Path2D();
        path.moveTo(points[0], points[1]);
        for (i in [2..<sizeof points step 2]) {
            path.lineTo(points[i], points[i+1]); // here step over the boundary---source of the bug
        }
        path.closePath();
        return path;
    }