These tests started to crash in <http://trac.webkit.org/changeset/162184>: editing/pasteboard/drop-link.html editing/selection/move-by-word-visually-crash-test-5.html editing/selection/move-by-word-visually-crash-test-css-generated-content.html editing/selection/move-by-word-visually-inline-block-positioned-element.html editing/selection/move-by-word-visually-mac.html editing/selection/move-by-word-visually-multi-line.html editing/selection/move-by-word-visually-multi-space.html editing/selection/move-by-word-visually-null-box.html editing/selection/move-by-word-visually-single-space-inline-element.html editing/selection/move-by-word-visually-single-space-one-element.html editing/selection/move-by-word-visually-textarea.html There is no crash log available form the bot.
<rdar://problem/15878356>
Also, surprising as it may be, js/function-apply-many-args.html. Must be because there is a long line in output that we are trying to break into multiple lines.
See also: bug 127424.
Yeah, that fixed it. *** This bug has been marked as a duplicate of bug 127424 ***