This is not correct.
<rdar://problem/54574453>
Created attachment 379183 [details] Patch
Comment on attachment 379183 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=379183&action=review > Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:1861 > + int registerOffset = firstFreeReg; This is the fix.
Comment on attachment 379183 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=379183&action=review r=me too. > Source/JavaScriptCore/ChangeLog:51 > + represent that this includes |this| count. By "this includes |this| count", you mean "the argument count includes |this|", yes? Can you rephrase as that please. The first "this" is a bit ambiguous.
Comment on attachment 379183 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=379183&action=review >> Source/JavaScriptCore/ChangeLog:51 >> + represent that this includes |this| count. > > By "this includes |this| count", you mean "the argument count includes |this|", yes? Can you rephrase as that please. The first "this" is a bit ambiguous. Fixed.
Committed r250116: <https://trac.webkit.org/changeset/250116>