There is currently a memory leak with the member variable: m_structureHistory. Fix it.
Created attachment 236882 [details] patch Fixes the memory leak.
Comment on attachment 236882 [details] patch Clearing flags on attachment: 236882 Committed r172804: <http://trac.webkit.org/changeset/172804>
All reviewed patches have been landed. Closing bug.
Comment on attachment 236882 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=236882&action=review > Source/JavaScriptCore/runtime/TypeSet.cpp:120 > + RefPtr<StructureShape> shape = m_structureHistory.at(i); Can you use bracket access instead of .at() in all this code?