Previously, we didn't handle this IR because I didn't think it was possible to generate. It turns out it is possible, and it happens when we PutStack the Spread but nothing escapes the CreateRest. It's easy to support this, so we will. Patch forthcoming.
<rdar://problem/35676119>
Created attachment 327692 [details] patch
Comment on attachment 327692 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=327692&action=review r=me > Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp:5292 > + static_assert(sizeof(JSValue) == 8 && 1 << 3 == 8, "Assumed in the code below."); 1 << 3 == 8 ? Seems pretty stable :p
Created attachment 327701 [details] patch for landing
Comment on attachment 327701 [details] patch for landing Clearing flags on attachment: 327701 Committed r225202: <https://trac.webkit.org/changeset/225202>
All reviewed patches have been landed. Closing bug.