Reproducible, just have to browse around for a few minutes and then it crashes.
Created attachment 17821 [details] Crash report
I can reproduce this crash on Safari 3 and WebKit nightlies but did not experience it under Safari 2 or older nightlies. I will try and narrow down where the regression occurred.
I believe this bug started somewhere between 25725 and 26103.
I haven't been able to reproduce this while using Trac hosted on servers outside of our network.
Do you have a Java applet that is loaded on your internal Trac pages? I see lots of Java information in the crash report (Attachment #17821 [details]). Can you save the source (or a webarchive) of and internal page, then reload the page to reproduce the issue? You might try upgrading to Leopard 10.5.1 to see if that fixes the issue.
Note that you may use the WebKitTools/Scripts/bisect-builds script to run an automated binary search of WebKit nightly builds to search for when the crash started.
Also, could you please test without SIMBL installed?
can't reproduce this using the lateset nightlies
Resolving as WORKSFORME per the above comment, thanks for letting us know!