Found by Joe here: https://bugs.webkit.org/attachment.cgi?id=275721&action=review
It looks like in TypeReference.__init__, we never check whether the type_kind is valid. Then we return it as the fallback if the type_reference (i.e., $ref) is not set.
Created attachment 275979 [details]
This patch modifies the inspector protocol generator. Please ensure that you have rebaselined any generator test results (i.e., by running `Tools/Scripts/run-inspector-generator-tests --reset-results`)
Comment on attachment 275979 [details]
Clearing flags on attachment: 275979
Committed r199219: <http://trac.webkit.org/changeset/199219>
All reviewed patches have been landed. Closing bug.