The JS test mentioned in the subject has been failing for a while now, with:
Assertion failure: shape->writable(), at js/src/methodjit/StubCalls.cpp:170
Tested with m-c revision 8ae16e346bd0.
Er, I fail at life. Did I really fix the interpreter code but not the stubcall code? Looks like it. Such a rookie error.