I'll add a test case
Created attachment 30533 [details]
Simple test case
Seems like one of Oliver's recent optimisations may have introduced this.
*** Bug 23670 has been marked as a duplicate of this bug. ***
This occurs in the 4.0 beta, so it's not Oliver's recent changes.
It also impacts the interpreter -- i think it may be a bug in op_resolve_global, but that doesn't explain why it only seems to effect .call and .apply
op_resolve_global is apparently broked.
Got it, we're caching a property on the global objects prototype chain as if it were directly on the global object
Committing to http://svn.webkit.org/repository/webkit/trunk ...