The DFG speculative JIT will terminate speculation if a Branch did not encounter an integer or a boolean. Terminating speculation in this case is not profitable, since proving that the Branch encountered either integer or boolean does not provide any useful data flow information (at least not in the current DFG JIT architecture). The non-speculative JIT always performs slow calls for Branches. Both JITs should use the same implementation of Branch, which does no speculation, and only performs a slow call if necessary.
Created attachment 100901 [details]
Comment on attachment 100901 [details]
Clearing flags on attachment: 100901
Committed r91041: <http://trac.webkit.org/changeset/91041>
All reviewed patches have been landed. Closing bug.