SquirrelFish does not yet properly handle property getters and setters.
The problem for these implicit function calls (valueOf is called by toNumber, toString by +, etc, getters/setters by resolve) is that they may require a function call in the VM, which may inturn result in resizing of the RegisterFile which would invalidate state in the originating privateExecute frame. Adding the required guards around all call sites would almost certainly be a perf hit but maybe possible at a few places (resolve?)
This is causing a lot of failures in the remaining JavaScriptCore test failures, e.g. the instanceof tests. We should really find a way to fix this without too large of a performance regression.
I'm not sure valueOf / toString are quire the same issue as getters and setters, and we might not want to solve them the exact same way necessarily.
Committed r32669 and r32718