The data member sizeOfLastScratchBuffer in the VM class is only initialized if DFG JIT is enabled, even though it's defined regardless. This causes an early crash on Windows, which doesn't have DFG JIT enabled.
Created attachment 215063 [details] Patch
Comment on attachment 215063 [details] Patch r=me
Comment on attachment 215063 [details] Patch Clearing flags on attachment: 215063 Committed r157930: <http://trac.webkit.org/changeset/157930>
All reviewed patches have been landed. Closing bug.