[webkit-reviews] review requested: [Bug 25227] Array.filter triggers an assertion when the target array shrinks while being filtered : [Attachment 29523] filter fixeration

[bugzilla-daemon at webkit.org]

Oliver Hunt <oliver at apple.com> has asked  for review:
Bug 25227: Array.filter triggers an assertion when the target array shrinks
while being filtered
https://bugs.webkit.org/show_bug.cgi?id=25227

Attachment 29523: filter fixeration
https://bugs.webkit.org/attachment.cgi?id=29523&action=review