It clobbers it prior to the Structure checks, so if any of the checks fail then the slow path gets the target of the proxy rather than the proxy itself. We need to delay the clobbering of baseGPR until we know the inline cache is going to succeed.
Created attachment 231463 [details] Patch
Comment on attachment 231463 [details] Patch Clearing flags on attachment: 231463 Committed r168861: <http://trac.webkit.org/changeset/168861>
All reviewed patches have been landed. Closing bug.