Use InternalArray in Object.defineProperties to avoid issues with overwriten properties on Array....

src/v8natives.js

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 1002 matching lines @@
   }
   return obj;
 }
 
 
 // ES5 section 15.2.3.7.
 function ObjectDefineProperties(obj, properties) {
   if (!IS_SPEC_OBJECT(obj))
     throw MakeTypeError("obj_ctor_property_non_object", ["defineProperties"]);
   var props = ToObject(properties);
-  var key_values = [];
+  var key_values = new InternalArray();
   for (var key in props) {

[Lasse Reichstein, 2011/08/18 06:56:41]

How about making a way to find all own properties only? E.g.
something like GetOwnPropertyNames that filter the non-enumerable out?

     if (%HasLocalProperty(props, key)) {
       key_values.push(key);
       var value = props[key];
       var desc = ToPropertyDescriptor(value);
       key_values.push(desc);
     }
   }
   for (var i = 0; i < key_values.length; i += 2) {
     var key = key_values[i];
     var desc = key_values[i + 1];
@@ skipping 499 matching lines @@
 // ----------------------------------------------------------------------------
 
 function SetupFunction() {
   InstallFunctions($Function.prototype, DONT_ENUM, $Array(
     "bind", FunctionBind,
     "toString", FunctionToString
   ));
 }
 
 SetupFunction();