WebKit JSC Incorrect Optimization

A proof of concept has been released that bypasses the fix for the original finding regarding an incorrect optimization in BytecodeGenerator::emitGetByVal in WebKit JSC.
Source: WebKit JSC Incorrect Optimization