Bug 1063488 - Treat MaybeCopyElementsForWrite as possibly overwriting an object's elements pointer, r=jandem.