Created attachment 170783 [details]
r=me too. rs=me, if you come up with a test for have structures.
Landed in http://trac.webkit.org/changeset/132554
The fast/js/dfg-arrayify-elimination.html test fails on 32 bit platforms:
Skipped on Qt by http://trac.webkit.org/changeset/132577. Please unskip it with the proper fix.
*** Bug 100077 has been marked as a duplicate of this bug. ***