There's a FIXME I put in earlier when I was trying to avoid touching JavaScriptCore.
Created attachment 259052 [details] Patch
Comment on attachment 259052 [details] Patch Clearing flags on attachment: 259052 Committed r188567: <http://trac.webkit.org/changeset/188567>
All reviewed patches have been landed. Closing bug.