Bug 862606 - Shift around some marking for brain transplants (r=bhackett,a=bajaj)
Bug 861165: IonMonkey: Correct behaviour for JSOP_IN on dense native with negative index. r=bhackett, a=bajaj