Description
A (very old) change dating back to Polymer 1.x was made to allow array splice info to be transmitted only via the data-binding system, without actually assigning the splices object to the array at that array.splices path. That change opened up the potential for a bug where a reentrant change of a property or path back to undefined would result in a stale value being returned in a wildcard observer info object.
Related to #5475 (Wildcard observer value wrong with reentrant change).
Steps to Reproduce
See skipped tests reentry after prop goes back to undefined and reentry after path goes back to undefined added in #5476. Ideally a fix to this bug would allow enabling those tests.
Versions