Bug 806522 - Assertion failure: getSlot(EVAL).isObject(), r=Waldo