The buildbot sees the crash all of the time, but because it happens after the test result has been written it rarely shows the test as having failed or crashed. I bisected through the layout tests to narrow it down to editing/deleting/5408255.html. Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_PROTECTION_FAILURE at address: 0x00000010 0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89 89 unsigned hash() { if (m_hash == 0) m_hash = computeHash(m_data, m_length); return m_hash; } (gdb) bt 10 #0 0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89 #1 0x039ccae9 in WebCore::StringHash::hash (key=@0x12cae2c) at text/StringHash.h:69 #2 0x039d10a5 in WTF::IdentityHashTranslator<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WebCore::StringHash>::hash (key=@0x12cae2c) at HashTable.h:267 #3 0x039da967 in WTF::HashTable<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WTF::PairFirstExtractor<std::pair<WebCore::String, WebCore::CachedResource*> >, WebCore::StringHash, WTF::PairHashTraits<WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >, WTF::HashTraits<WebCore::String> >::lookup<WebCore::String, WTF::IdentityHashTranslator<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WebCore::StringHash> > (this=0x7035be8, key=@0x12cae2c) at HashTable.h:462 #4 0x0371a80c in WTF::HashTable<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WTF::PairFirstExtractor<std::pair<WebCore::String, WebCore::CachedResource*> >, WebCore::StringHash, WTF::PairHashTraits<WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >, WTF::HashTraits<WebCore::String> >::lookup (this=0x7035be8, key=@0x12cae2c) at HashTable.h:330 #5 0x039daa40 in WTF::HashMap<WebCore::String, WebCore::CachedResource*, WebCore::StringHash, WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >::get (this=0x7035be8, key=@0x12cae2c) at HashMap.h:207 #6 0x03716996 in WebCore::Cache::resourceForURL (this=0x7035a00, url=@0x12cae2c) at WebCore/loader/Cache.cpp:244 #7 0x03721a56 in WebCore::CachedResource::~CachedResource (this=0x12cae10) at WebCore/loader/CachedResource.cpp:85 [...]
Landed in r37016.