[webkit-reviews] review granted: [Bug 228838] REGRESSION (r280507): ASSERTION FAILED: !undominatedPhis.contains(value) in JSC::B3::(anonymous namespace)::Validater::validatePhisAreDominatedByUpsilons() : [Attachment 435028] Patch

[bugzilla-daemon at webkit.org]

Geoffrey Garen <ggaren at apple.com> has granted Robin Morisset
<rmorisset at apple.com>'s request for review:
Bug 228838: REGRESSION (r280507): ASSERTION FAILED:
!undominatedPhis.contains(value) in JSC::B3::(anonymous
namespace)::Validater::validatePhisAreDominatedByUpsilons()
https://bugs.webkit.org/show_bug.cgi?id=228838

Attachment 435028: Patch

https://bugs.webkit.org/attachment.cgi?id=435028&action=review




--- Comment #4 from Geoffrey Garen <ggaren at apple.com> ---
Comment on attachment 435028
  --> https://bugs.webkit.org/attachment.cgi?id=435028
Patch

r=me