As part of recent changes in JSC, more Interpreter::lockCount() asserts were added, thus causing WebCore +SVG to fail in more places. Attached is an example SVG which asserts.
Created attachment 3505 [details] A simple javascript SVG which asserts
Created attachment 3507 [details] Adds necessary Interpreter::lock()/unlock() calls.
Comment on attachment 3507 [details] Adds necessary Interpreter::lock()/unlock() calls. Looks fine. The APPLE_CHANGES should not be necessary, because the lock/unlock functions should be empty inlines when locking is not necessary, but I guess that's not how JavaScriptCore is right now. r=me