AFAIK, ECMA-262 doesn't define error handling in this case, but I think that we'd like to maintain Firefox compatibility.
Created attachment 20450 [details]
Created attachment 20453 [details]
Created attachment 20454 [details]
Forgot to save ChangeLog before making the patch.
Created attachment 20455 [details]
Third time's the charm?
+ OwnPtr<HashSet<JSObject*> > visitedElements;
Since this variable is now visible outside of the array implementation file, I think it needs a more specific name. How about "arrayVisitedElements"? Maybe also add a comment that says "Global data shared by array prototype functions".
Please land this patch with your testcase.
Comment on attachment 20455 [details]
Setting r+ based on Geoff's r=me.
Committed revision 31807.