ObjectPrototype caches whether it contains any numeric properties (m_hasNoPropertiesWithUInt32Names), calls to defineOwnProperty need to update this cache.
Created attachment 127875 [details] Fix
Fixed in r108282.