WebKit JSC ForInContext Invalidation

WebKit JSC has an issue where BytecodeGenerator::hoistSloppyModeFunctionIfNecessary does not invalidate the ForInContext object.

Leave a Reply