$ 0 0 JavaScriptCore loop-invariant code motion (LICM) in DFG JIT leaves a stack variable uninitialized.