We're de-virtualizing JSObject. defineOwnProperty is a virtual method in JSObject. Thus, we need to de-virtualize defineOwnProperty. We'll put it in the MethodTable.
Created attachment 113526 [details] Patch
Comment on attachment 113526 [details] Patch r=me
Created attachment 113960 [details] Patch
Comment on attachment 113960 [details] Patch r=me
Comment on attachment 113960 [details] Patch Clearing flags on attachment: 113960 Committed r99675: <http://trac.webkit.org/changeset/99675>
All reviewed patches have been landed. Closing bug.