We're de-virtualizing JSObject. defineSetter is a virtual method in JSObject. Thus, we need to de-virtualize defineSetter. We'll put it in the MethodTable.
Created attachment 113213 [details] Patch
Comment on attachment 113213 [details] Patch Clearing flags on attachment: 113213 Committed r99018: <http://trac.webkit.org/changeset/99018>
All reviewed patches have been landed. Closing bug.