Created attachment 271475 [details]
Landed in http://trac.webkit.org/changeset/196652
Re-opened since this is blocked by bug 154315
(In reply to comment #3)
> Re-opened since this is blocked by bug 154315
LOL, I realize why. I passed the typed array storage as a butterfly. That ain't right.
Created attachment 271516 [details]
This time, it won't set the bots on fire, I promise.
Created attachment 271519 [details]
even better patch
Landed in http://trac.webkit.org/changeset/196684