1 files changed, 3 insertions, 1 deletions
diff --git a/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp b/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
index de01adb1f..75f0b7a74 100644
--- a/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
+++ b/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
@@ -618,7 +618,9 @@ private:
         case DoubleAsInt32:
         case GetLocalUnlinked:
         case GetMyArgumentsLength:
-        case GetMyArgumentByVal: {
+        case GetMyArgumentByVal:
+        case PhantomPutStructure:
+        case PhantomArguments: {
             // This node should never be visible at this stage of compilation. It is
             // inserted by fixup(), which follows this phase.
             ASSERT_NOT_REACHED();