The DFG non-speculative JIT does not use() the aliased GetByVal when compiling GetByVal, which results in that first GetByVal's use count never dropping to zero. The DFG non-speculative JIT should call use() on the aliased GetByVal.
Created attachment 101535 [details] the patch
Comment on attachment 101535 [details] the patch Clearing flags on attachment: 101535 Committed r91439: <http://trac.webkit.org/changeset/91439>
All reviewed patches have been landed. Closing bug.