The assertion failure shows up readily when you run "run-javascriptcore-tests --debug --32-bit".
Looking at it.
<rdar://problem/16284986>
There is code in ScratchRegisterAllocator.cpp that is expecting GPRInfo::toIndex() to be able to return InvalidIndex. Hence, the assertion is invalid. Ditto for FPRInfo::toIndex(). The fix is to remove the "result != InvalidIndex" assertions.
Created attachment 226381 [details] the patch.
Comment on attachment 226381 [details] the patch. Thanks for the review.
Comment on attachment 226381 [details] the patch. r=me too
Comment on attachment 226381 [details] the patch. Clearing flags on attachment: 226381 Committed r165431: <http://trac.webkit.org/changeset/165431>
All reviewed patches have been landed. Closing bug.