crash on match when using wikipedia's navigation popups

[Derk-Jan Hartman]

This bug is the result of hovering over the wikilink [[October 23]] on en.wikipedia.org.
You need to have wikipedia's navigation popups installed in order to trigger the bug.

Install the following on your wikipedia account's javascript page ( http://en.wikipedia.org/wiki/User:<yourusername>/monobook.js )

---start of code--
document.write('<script type="text/javascript" src="' 
             + 'http://en.wikipedia.org/w/index.php?title=User:Lupin/popups.js' 
             + '&action=raw&ctype=text/javascript&dontcountme=s"></script>');

popupStructure=fancy;
popupRevertSummaryPrompt=true;
popupLazyDownloads=true;
popupRevertAutoClick=wpPreview;
---end of code--

[Derk-Jan Hartman]

Created attachment 13698 [details]
JavascriptCore crashreport

[Derk-Jan Hartman]

I've seen a lot more JavascriptCore crashes when using these navigation popups btw. I'll try to add them whenever i have the time, but if anyone else want's to test, using this JS software on wikipedia is a good way to find JSC bugs it seems

[Derk-Jan Hartman]

Doesn't crash on NB r20285

[Alexey Proskuryakov]

Thank you for checking with a nightly build! Closing per the above comment, as there isn't much we can do with a bug that's already fixed.

You can report this to vendors such as Apple (http://bugreport.apple.com) or Omni to request expedite integration into their respective releases.