The current baseline code creates special fast case profiles records for bytecodes that don't need them. This was done to keep the DFG from crashing when it searches for such a profile and don't find one. Instead, we should fix the code to check for the existence of the profile before dereferencing it to get a count.
Created attachment 262293 [details] the fix.
Comment on attachment 262293 [details] the fix. r=me
Thanks. Landed in r190435: <http://trac.webkit.org/r190435>.