This blocks us from fixing https://bugs.webkit.org/show_bug.cgi?id=63880
Created attachment 99638 [details] The patch
Created attachment 99649 [details] + interpreter fix Tested x86-64, x86, interpreter, DFG-JIT. No sunspider impact.
Fixed in r90371