Many WeakImpl's do not have a WeakHandleOwner, so WeakBlock::visit() is just wasting its time looking up the mark bits for its pointee.
Created attachment 273260 [details] Patch
Comment on attachment 273260 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=273260&action=review > Source/JavaScriptCore/heap/WeakBlock.cpp:121 > + const JSValue& jsValue = weakImpl->jsValue(); The use of const JSValue& here seems peculiar. Why not just JSValue?
Comment on attachment 273260 [details] Patch Clearing flags on attachment: 273260 Committed r197774: <http://trac.webkit.org/changeset/197774>
All reviewed patches have been landed. Closing bug.