REGRESSION(r239612) Crash at runtime due to broken DFG assumption
<rdar://problem/47363838>
Created attachment 359853 [details] Patch for landing
Committed r240327: <https://trac.webkit.org/changeset/240327>