We don't do any copying into the newly allocated vector and we don't zero-initialize CopiedBlocks during the copying phase, so we end up with uninitialized memory in arrays which have undecided indexing types. We should just do the actual memcpy from the old block to the new one. We should also assert that all of the elements are empty in vectors with undecided indexing type.
Created attachment 174790 [details]
Comment on attachment 174790 [details]
Clearing flags on attachment: 174790
Committed r135756: <http://trac.webkit.org/changeset/135756>
All reviewed patches have been landed. Closing bug.