Specifically: JSTests/test262/test/built-ins/Object/freeze/15.2.3.9-2-c-2.js JSTests/test262/test/built-ins/Object/freeze/15.2.3.9-2-c-3.js JSTests/test262/test/built-ins/Object/freeze/15.2.3.9-2-c-4.js Which can be run with: jsc JSTests/test262/harness/assert.js JSTests/test262/harness/sta.js JSTests/test262/harness/propertyHelper.js <testFile>
Wow, that's a silly goof. The optimization ended up setting ReadOnly on Access properties, which would prevent setters from being invoked. That's easy to fix.
Created attachment 285253 [details] the patch
Comment on attachment 285253 [details] the patch r=me
Landed in https://trac.webkit.org/changeset/204093