Patch forthcoming.
Created attachment 216467 [details] the patch
Comment on attachment 216467 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=216467&action=review r=me > Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:4513 > + m_jit.addPtr(JITCompiler::TrustedImm32(sizeof(IndexingHeader)), scratchGPR); This seems like a good change
Landed in http://trac.webkit.org/changeset/158983