Created attachment 8396653 [details] [diff] [review]
Simple fix. Not SS.
Testcase from decoder (js__types__TypeScript__FreezeTypeSets.txt).
Probably runs into something from jorendorff, but this is the last of the OOM bugs that I looked into, and the rest can probably be fixed in one fell swoop. I won't touch any more.