The test js/dom/string-replace-exception-crash.html no longer crashes, but works fine. It needs to be re-enabled.
Committed r178698: <http://trac.webkit.org/changeset/178698>