We're de-virtualizing JSObject. getOwnPropertyNames is a virtual method in JSObject. Thus, we need to de-virtualize getOwnPropertyNames. We'll put it in the MethodTable.
Created attachment 113255 [details] Patch
Committed r99126: <http://trac.webkit.org/changeset/99126>
I think this caused crashes: http://build.webkit.org/results/SnowLeopard%20Intel%20Debug%20(Tests)/r99126%20(2813)/results.html.
(In reply to comment #3) > I think this caused crashes: http://build.webkit.org/results/SnowLeopard%20Intel%20Debug%20(Tests)/r99126%20(2813)/results.html. I bet this crash is due to not passing the right this object in JSDOMWindowShell::getOwnPropertyNames. The shell is being passed instead of window().
Crash fixed in r99135.