Patch forthcoming.
Created attachment 237505 [details] Patch
Comment on attachment 237505 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=237505&action=review r=me > Source/JavaScriptCore/dfg/DFGOperations.cpp:300 > + if (AtomicStringImpl* existingAtomicString = asString(property)->toExistingAtomicString(exec)) { This is a clever observation. I wonder if we should build it into JSObject, by providing a (fast?)getOwnProperty() that takes a JSString* argument. That would simplify some of the call sites, and it would encourage folks writing code that used JSString* to do the right thing by default.
Comment on attachment 237505 [details] Patch Clearing flags on attachment: 237505 Committed r173188: <http://trac.webkit.org/changeset/173188>
All reviewed patches have been landed. Closing bug.