The following code compiles 7 times, but never tiers up to DFG because of the arity check: function foo(x, y) { for (var i = 0; i < 1e8; i++) { x[y] += i; } } foo({})
Created attachment 370511 [details] Patch
Created attachment 370513 [details] Patch Fix typo in ChangeLog
Comment on attachment 370513 [details] Patch Clearing flags on attachment: 370513 Committed r245710: <https://trac.webkit.org/changeset/245710>
All reviewed patches have been landed. Closing bug.
<rdar://problem/51080799>