+++ js/src/jsarray.cpp
@@ -830,6 +830,8 @@
          * a native object (possibly a slow array) that has indexed properties,
          * return true.
          */
+        if (obj == (void *)1) break;
+
         if (!obj->isNative())
             return true;
         if (obj->isIndexed())