Fix a few typos in comments in js/src. No bug, no_r=me.

js/src/ds/Sort.h

@@ -105,7 +105,7 @@ MergeArrayRuns(T *dst, const T *src, size_t run1, size_t run2, Comparator c)
  *
  *     bool operator()(const T& a, const T& a, bool *lessOrEqualp);
  *
- * It should return true on success and sets lessOrEqualp to the result of
+ * It should return true on success and set *lessOrEqualp to the result of
  * a <= b operation. If it returns false, the sort terminates immediately with
  * the false result. In this case the content of the array and scratch is
  * arbitrary.

js/src/jsarray.cpp

@@ -59,7 +59,7 @@
  *
  * NB: the capacity and length of a dense array are entirely unrelated!  The
  * length may be greater than, less than, or equal to the capacity. The first
- * case may occur when the user writes "new Array(100), in which case the
+ * case may occur when the user writes "new Array(100)", in which case the
  * length is 100 while the capacity remains 0 (indices below length and above
  * capacity must be treated as holes). See array_length_setter for another
  * explanation of how the first case may occur.

js/src/jsutil.h

@@ -370,7 +370,7 @@ UnsignedPtrDiff(const void *bigger, const void *smaller)
 }
 
 /*
- * Ordinarily, a function taking a JSContext* 'cx' paremter reports errors on
+ * Ordinarily, a function taking a JSContext* 'cx' parameter reports errors on
  * the context. In some cases, functions optionally report and indicate this by
  * taking a nullable 'maybecx' parameter. In some cases, though, a function
  * always needs a 'cx', but optionally reports. This option is presented by the