491288 - TM: trying to use non-primitive as array index bails off trace

Status: RESOLVED DUPLICATE of bug 483940

(Core :: JavaScript Engine, defect)

Description

[Boris Zbarsky [:bzbarsky]]

Loading http://www.cnn.com with TRACEMONKEY="abort" I get quite a number of:

abort: 7685: non-primitive index
Abort recording of tree http://i.cdn.turner.com/cnn/.element/js/2.0/scripts/prototype.js:1594@32 at http://i.cdn.turner.com/cnn/.element/js/2.0/scripts/prototype.js:1135@8: getelem.

The relevant prototype.js code looks like this:

Element.extend.cache = {
  findOrStore: function(value) {
    return this[value] = this[value] || function() {
      return value.apply(null, [this].concat($A(arguments)));
    }
  }
};

    for (var property in methods) {
      var value = methods[property];
      if (!onlyIfAbsent || !(property in destination))
        destination[property] = cache.findOrStore(value);
    }

Presumably |value| is a non-primitive in that loop.  The loop is part of Element.addMethods, so is called for every single element node returned from a prototype element-getting API, as I understand it.