The loop implemented in the populateGridPositions has an incorrect limit and the last operation is overwritten in the next line of code after the loop. Even that it does o cause a bug, it makes no sense and needs to be changed.
Created attachment 275955 [details]
Comment on attachment 275955 [details]
Clearing flags on attachment: 275955
Committed r199222: <http://trac.webkit.org/changeset/199222>
All reviewed patches have been landed. Closing bug.