The below HTML causes a NULL pointer AV. This does not repro in Chrome, so I assume it is a problem in JavaScriptCore or JavaScriptGlue <BODY onload=go()></BODY> <SCRIPT> function go() { document.open() document.isDefaultNamespace() } </SCRIPT>
*** This bug has been marked as a duplicate of 19470 ***