We have some objects that the DFG::Plan points to but that are owned by DFG::Graph until such time as they are owned by DFG::JITCode. It's weird, and a lot of this is a deeper spaghetti that needs to be fixed. But for now, at least make FTL::fail() follow the protocol for InlineCallFrames.
Created attachment 229584 [details] the patch
Landed in http://trac.webkit.org/changeset/167456