The type inference will decide that this returns MachineInt, but the FTL thinks that it returns a double.
Created attachment 227383 [details] the patch
LGTM.
Comment on attachment 227383 [details] the patch r=me
Comment on attachment 227383 [details] the patch Clearing flags on attachment: 227383 Committed r166045: <http://trac.webkit.org/changeset/166045>
All reviewed patches have been landed. Closing bug.