V8 convertNPVariantToJValue has a bug when converting float and double types.
The wrong element of the 'result' enum is used in these cases.
We should use result.f for floats, and result.d for doubles.
Created attachment 48152 [details]
Comment on attachment 48152 [details]
Clearing flags on attachment: 48152
Committed r54366: <http://trac.webkit.org/changeset/54366>
All reviewed patches have been landed. Closing bug.