1 files changed, 3 insertions, 1 deletions
diff --git a/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp b/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
index d23cd8265..2e4f8094c 100644
--- a/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
+++ b/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
@@ -449,7 +449,9 @@ private:
         }
             
         case GetPropertyStorage: 
-        case GetIndexedPropertyStorage: {
+        case GetIndexedPropertyStorage:
+        case AllocatePropertyStorage:
+        case ReallocatePropertyStorage: {
             changed |= setPrediction(SpecOther);
             changed |= mergeDefaultFlags(node);
             break;