[Webkit-unassigned] [Bug 159664] New: for-in over object with a Symbol key breaks upon JITing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=159664

            Bug ID: 159664
           Summary: for-in over object with a Symbol key breaks upon
                    JITing
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: chrisjshull at gmail.com

See http://jsbin.com/pelokucuwe/1/edit?js,console

Console shows that iterating over an object with a Symbol key breaks over time (theory is due to JITing).

Observed:
["bar", function bar() {}]
["bar", 1]

Expected:
["bar", function bar() {}]
["bar", function bar() {}]