The DFG JIT passes the this argument to constructors, even though constructors create this themselves. The DFG should not pass this to constructors.
Created attachment 103399 [details] the patch
Comment on attachment 103399 [details] the patch Clearing flags on attachment: 103399 Committed r92732: <http://trac.webkit.org/changeset/92732>
All reviewed patches have been landed. Closing bug.