Skip stack trace formatting in case the global object is already dead.

src/messages.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 808 matching lines @@
                       ObjectLookupGetter) === this.fun ||
        %_CallFunction(this.receiver,
                       ownName,
                       ObjectLookupSetter) === this.fun ||
        %GetDataProperty(this.receiver, ownName) === this.fun)) {
     // To handle DontEnum properties we guess that the method has
     // the same name as the function.
     return ownName;
   }
   var name = null;
-  for (var prop in this.receiver) {
+  var property_names = %GetPropertyNamesNoSideEffect(this.receiver);
+  for (var i = 0; i < property_names.length; i++) {
+  var prop = property_names[i];
     if (%_CallFunction(this.receiver, prop, ObjectLookupGetter) === this.fun ||
         %_CallFunction(this.receiver, prop, ObjectLookupSetter) === this.fun ||
-        %GetDataProperty(this.receiver, prop) === this.fun) {
+        %GetDataProperty(this.receiver, TO_STRING_INLINE(prop)) === this.fun) {
       // If we find more than one match bail out to avoid confusion.
       if (name) {
         return null;
       }
       name = prop;
     }
   }
   if (name) {
     return name;
   }
@@ skipping 280 matching lines @@
     stack = FormatStackTrace(error_string, GetStackFrames(stack));
     // Release context value.
     error_string = void 0;
     return stack;
   };
   %MarkOneShotGetter(getter);
 
   // The 'stack' property of the receiver is set as data property.  If
   // the receiver is the same as holder, this accessor pair is replaced.
   var setter = function(v) {
+    // If the receiver is the holder, release the raw stack trace.
+    if (this == obj) stack = void 0;
     %DefineOrRedefineDataProperty(this, 'stack', v, NONE);
   };
 
   %DefineOrRedefineAccessorProperty(obj, 'stack', getter, setter, DONT_ENUM);
 }
 
 
 function SetUpError() {
   // Define special error type constructors.
 
@@ skipping 132 matching lines @@
   // a data property.
   var error_string = boilerplate.name + ": " + boilerplate.message;
 
   // The getter must not change the object layout as it may be called after GC.
   function getter() {
     var holder = this;
     while (!IS_ERROR(holder)) {
       holder = %GetPrototype(holder);
       if (holder == null) return MakeSyntaxError('illegal_access', []);
     }
-    var stack = %GetOverflowedStackTrace(holder);
+    var stack = %GetOverflowStackTrace(holder);
     if (IS_STRING(stack)) return stack;
     if (IS_ARRAY(stack)) {
       var result = FormatStackTrace(error_string, GetStackFrames(stack));
-      %SetOverflowedStackTrace(holder, result);
+      %SetOverflowStackTrace(holder, result);
       return result;
     }
     return void 0;
   }
   %MarkOneShotGetter(getter);
 
   // The 'stack' property of the receiver is set as data property.  If
   // the receiver is the same as holder, this accessor pair is replaced.
   function setter(v) {
+    // Attempt to release the overflow stack trace stored as hidden property.
+    if (IS_ERROR(this)) %SetOverflowStackTrace(this, void 0);
     %DefineOrRedefineDataProperty(this, 'stack', v, NONE);
-    // Release the stack trace that is stored as hidden property, if exists.
-    %SetOverflowedStackTrace(this, void 0);
   }
 
   %DefineOrRedefineAccessorProperty(
       boilerplate, 'stack', getter, setter, DONT_ENUM);
 
   return boilerplate;
 }
 
 var kStackOverflowBoilerplate = SetUpStackOverflowBoilerplate();