Patch forthcoming.
Created attachment 271475 [details] the patch
Landed in http://trac.webkit.org/changeset/196652
Re-opened since this is blocked by bug 154315
(In reply to comment #3) > Re-opened since this is blocked by bug 154315 LOL, I realize why. I passed the typed array storage as a butterfly. That ain't right.
Created attachment 271516 [details] the patch This time, it won't set the bots on fire, I promise.
Created attachment 271519 [details] even better patch
Landed in http://trac.webkit.org/changeset/196684