The DFG JIT op_call implementation invokes flushRegisters() to ensure that any live registers are spilled and later refilled on-demand, since in our calling convention all registers are caller-save. However, in the current implementation flushRegisters() may also flush registers that are killed by the call.
Created attachment 99870 [details] the patch
Comment on attachment 99870 [details] the patch Clearing flags on attachment: 99870 Committed r90502: <http://trac.webkit.org/changeset/90502>
All reviewed patches have been landed. Closing bug.