Bug 1065604 - Assert that JSPROP_SHARED is set on all properties defined with JSPROP_GETTER or JSPROP_SETTER. r=Waldo.

--HG--
extra : rebase_source : f928bfe44c33ec0e561db346a407e20ff26165c4
Bug 1051760 - Fix "Assertion failure: !vp.isMagic(), at jsobj.cpp:4600" with arguments, direct eval, and a destructuring declaration. r=Waldo.

--HG--
extra : rebase_source : 8054e6ed982d32e2a8e2d91cf52093abe589bfd2
Bug 1053676 - Insert GC pre-barriers for slots containing symbols in Ion code. r=terrence.

The first two hunks in this patch are improvements to an assertion blamed (I think incorrectly) for this bug in the original bug report. They are not directly related to the fix.

--HG--
extra : rebase_source : 031680a9b762f05e9b64e8aab9f87d686d2ab45d
extra : amend_source : 32f4ab968338de3ae989ec4d4c4dee7bd56df498