Reproducible on WebKit r37698. Any form that has an enctype of multipart/form-data and a multiple select with more than one item selected will crash WebKit. Reduced test case attached.
Created attachment 24513 [details] Reduced test page that crashes WebKit on submit
I think r 37748 probably fixes this- can someone confirm?
Cannot reproduce in WebKit r37764