See: https://bugs.webkit.org/show_bug.cgi?id=160922#c7 Saam points out that I addToGraph with the first opInfo instead of the second. IIUC that pipes into DFG's Node class, whose getHeapPrediction() does: return m_opInfo2.as<SpeculatedType>();
Created attachment 287792 [details] patch Perf numbers are pretty noisy, it seems 1.0148x faster or so.
Comment on attachment 287792 [details] patch Clearing flags on attachment: 287792 Committed r205361: <http://trac.webkit.org/changeset/205361>
All reviewed patches have been landed. Closing bug.