<rdar://problem/13131427>
Created attachment 190797 [details] the patch
Comment on attachment 190797 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=190797&action=review > Source/JavaScriptCore/ChangeLog:9 > + This was just a bad assertion: m_bytecodeOffset means that the value profile is constructed but not initialized. should say: This was just a bad assertion: m_bytecodeOffset == -1 means that the value profile is constructed but not initialized.
Comment on attachment 190797 [details] the patch r=me
Landed in http://trac.webkit.org/changeset/144356