We can shrink it down to one pointer instead of two.
Created attachment 267785 [details] Patch
Comment on attachment 267785 [details] Patch r=me after Windows fix. Looks like Windows didn't build due to the assert() firing.
Created attachment 269363 [details] Patch for landing
Comment on attachment 269363 [details] Patch for landing Clearing flags on attachment: 269363 Committed r195365: <http://trac.webkit.org/changeset/195365>
All reviewed patches have been landed. Closing bug.