This newly added is exposing a latent bug somewhere in the ARM64 JITs.
The test has been temporarily skipped in r192708: <http://trac.webkit.org/r192708>.
Created attachment 266186 [details]
Comment on attachment 266186 [details]
View in context: https://bugs.webkit.org/attachment.cgi?id=266186&action=review
> + speculationCheck(Overflow, JSValueRegs(), 0, m_jit.branchTest32(MacroAssembler::Zero, op2GPR));
Style: I think this is nicer to read with "0 => nullptr"
Thanks for the review. I've changed the "0" to "nullptr".
Landed in r192795: <http://trac.webkit.org/r192795>.