It either calls JSGlobalObject::put or Base::put. Hint: these are basically the same thing. In the latter case it might call lookupPut. That's redundant; JSObject::put handles static table entries.
Created attachment 271547 [details] Fix
All red patch! Whoooo!
Comment on attachment 271547 [details] Fix r=me
Transmitting file data .... Committed revision 196702.