The patch in r277027 to make deletion of GCAwareJITStubRoutines incremental has a bug:the routine may not be deleted yet by the incremental sweeper before the next GC cycle, and the GC will not be happy visiting dead cell pointers in that routine. There are also other bugs with the triggering of sweeping.
For now, we're reverting the patch, and will revisit this at a later time.
Created attachment 433362 [details]
The fast/canvas/canvas-overloads-strokeText.html crash on the mac-AS-debug-wk2 run appears to be a pre-existing issue. https://results.webkit.org/?suite=layout-tests&test=fast%2Fcanvas%2Fcanvas-overloads-strokeText.html shows that it crashes in a flaky manner.
Thanks for the review. Landed in r279861: <http://trac.webkit.org/r279861>.