Attempt at work-around for http://crbug.com/16276 by explicitly checking...

src/objects.cc

Index: src/objects.cc
===================================================================
--- src/objects.cc	(revision 2430)
+++ src/objects.cc	(working copy)
@@ -1632,6 +1632,7 @@
   return *value_handle;
 }
 
+
 void JSObject::LookupCallbackSetterInPrototypes(String* name,
                                                 LookupResult* result) {
   for (Object* pt = GetPrototype();
@@ -1659,7 +1660,7 @@
     if (JSObject::cast(pt)->HasFastElements()) continue;
     NumberDictionary* dictionary = JSObject::cast(pt)->element_dictionary();
     int entry = dictionary->FindEntry(index);
-    if (entry != StringDictionary::kNotFound) {
+    if (entry != NumberDictionary::kNotFound) {
       Object* element = dictionary->ValueAt(entry);
       PropertyDetails details = dictionary->DetailsAt(entry);
       if (details.type() == CALLBACKS) {