[JSC] Constant folding of UInt32ToNumber is incorrect
Created attachment 277301 [details] Patch
Created attachment 277303 [details] Patch
Comment on attachment 277303 [details] Patch r=me
Comment on attachment 277303 [details] Patch Clearing flags on attachment: 277303 Committed r200071: <http://trac.webkit.org/changeset/200071>
All reviewed patches have been landed. Closing bug.