V8ScriptProfileNodeCustom::toV8() needs not to be custom. Furthermore, the current custom toV8() is wrong in that it doesn't use a creationContext and it doesn't set a wrapper class id. This is one of steps to avoiding ASSERT()s that will be added in https://bugs.webkit.org/show_bug.cgi?id=107137 .
Created attachment 183409 [details] Patch
Comment on attachment 183409 [details] Patch Clearing flags on attachment: 183409 Committed r140185: <http://trac.webkit.org/changeset/140185>
All reviewed patches have been landed. Closing bug.