The current implementation mistakenly sets the address type to that of the value being loaded.
Created attachment 400746 [details] proposed patch.
Comment on attachment 400746 [details] proposed patch. r=me too
Thanks for the review. Landed in r262389: <http://trac.webkit.org/r262389>.
<rdar://problem/63839299>