TL;DR: Adding any non-built-in functions to Array.prototype AND Function.prototype will cause the IE8 native JSON parser to get a stack overflow when parsing any JSO
An extension of this issue (which is still present in IE9), is the native JSON.stringify function crashes IE when there is:
We're unsure which specific point causes the crash.
Our workaround in this instance was to use a replacer function on the stringify function to return null on a particular object property and stop the object graph from being traversed.