17925 2008-03-18 16:33:37 -0700 Crash in KJS::JSObject::put after setting this.__proto__ 2008-05-27 17:46:53 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Mac OS X 10.5 RESOLVED FIXED HasReduction, InRadar P2 Critical --- 13638 1 jruderman mrowe eric mjs oldest_to_newest 74347 0 jruderman 2008-03-18 16:33:37 -0700 Feeding this script to ToT Release/testkjs makes it crash. this.__proto__ = 1; r = 2; 74356 1 mrowe 2008-03-18 16:52:54 -0700 <rdar://problem/5806428> 74370 2 mrowe 2008-03-18 18:51:03 -0700 Fixed in r31145. 81663 3 andersca 2008-05-27 16:04:59 -0700 Reopening this since it still happens. 81673 4 andersca 2008-05-27 17:46:53 -0700 Committed revision 34160.