The DFG JIT passes the this argument to constructors, even though constructors create this themselves. The DFG should not pass this to constructors.
Created attachment 103399 [details]
Comment on attachment 103399 [details]
Clearing flags on attachment: 103399
Committed r92732: <http://trac.webkit.org/changeset/92732>
All reviewed patches have been landed. Closing bug.