Similar to bug 74333, but we can't remove all of the uses because certain functions require other vptrs to be removed as well.
Created attachment 118858 [details] Remove uses of JSArray vptr No changelog (see bug 74331)
Comment on attachment 118858 [details] Remove uses of JSArray vptr r=me
Comment on attachment 118858 [details] Remove uses of JSArray vptr View in context: https://bugs.webkit.org/attachment.cgi?id=118858&action=review > Source/JavaScriptCore/heap/MarkStack.cpp:315 > + if (cell->classInfo() == &JSArray::s_info) { Should use isJSArray().