Fixing http://bugzilla.mozilla.org/show_bug.cgi?id=205297

git-svn-id: svn://10.0.0.236/trunk@142327 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/js/rhino/src/org/mozilla/javascript/ScriptableObject.java

@@ -311,6 +311,10 @@ public abstract class ScriptableObject implements Scriptable, Serializable,
                 // Check slot was not deleted/replaced before synchronization
                 if (i >= 0 && slots[i] == slot) {
                     slots[i] = replacement;
+                    // It is important to make sure that lastAccess != slot
+                    // to prevent accessing the old slot via lastAccess and
+                    // then invoking setter one more time
+                    lastAccess = replacement;
                 }
             }
         }