The DFS JIT code that generates calls to operationStrCat and operationNewArray should directly provide the data buffer instead of providing the ScratchBuffer pointer. This would eliminate the need for operationStrCat and operationNewArray from having to call dataBuffer() on the ScratchBuffer object.
Created attachment 143057 [details] Patch
Comment #15 from https://bugs.webkit.org/show_bug.cgi?id=86553 after the change set landed suggests that we should add a create() method and use the constructor for ScratchBuffer.
Created attachment 143140 [details] Updated Patch with create() addition
Committed r117860: <http://trac.webkit.org/changeset/117860>