WebKit JSC - ArgumentsEliminationPhase::transform Incorrect LoadVarargs Handling

WebKit JSC - ArgumentsEliminationPhase::transform Incorrect LoadVarargs Handling op == PhantomNewArrayWithSpread || candidate-op == PhantomSpread ... if argumentCountIncludingThis limit storeArgumentCountIncludingThisargumentCountIncludingThis; // store arguments ... node-remove; node-origin.exit...