This bug is the result of hovering over the wikilink [[October 23]] on en.wikipedia.org. You need to have wikipedia's navigation popups installed in order to trigger the bug. Install the following on your wikipedia account's javascript page ( http://en.wikipedia.org/wiki/User:<yourusername>/monobook.js ) ---start of code-- document.write('<script type="text/javascript" src="' + 'http://en.wikipedia.org/w/index.php?title=User:Lupin/popups.js' + '&action=raw&ctype=text/javascript&dontcountme=s"></script>'); popupStructure=fancy; popupRevertSummaryPrompt=true; popupLazyDownloads=true; popupRevertAutoClick=wpPreview; ---end of code--
Created attachment 13698 [details] JavascriptCore crashreport
I've seen a lot more JavascriptCore crashes when using these navigation popups btw. I'll try to add them whenever i have the time, but if anyone else want's to test, using this JS software on wikipedia is a good way to find JSC bugs it seems
Doesn't crash on NB r20285
Thank you for checking with a nightly build! Closing per the above comment, as there isn't much we can do with a bug that's already fixed. You can report this to vendors such as Apple (http://bugreport.apple.com) or Omni to request expedite integration into their respective releases.