It clobbers it prior to the Structure checks, so if any of the checks fail then the slow path gets the target of the proxy rather than the proxy itself. We need to delay the clobbering of baseGPR until we know the inline cache is going to succeed.
Created attachment 231463 [details]
Comment on attachment 231463 [details]
Clearing flags on attachment: 231463
Committed r168861: <http://trac.webkit.org/changeset/168861>
All reviewed patches have been landed. Closing bug.