I've been getting frequent crashes today on r34257 in WebCore::JSDOMWindowBase::~JSDOMWindowBase() while the JS garbage collector runs. Doesn't seem to be related to any particular web site that I've visited.
Created attachment 21432 [details] crash log from r34257
*** This bug has been marked as a duplicate of 19318 ***