Using the nightly build from the 29th of February on Mac OS 10.5.6, on both Safari 3 and 4b,
'<div style="-webkit-transform-style:preserve-3d;">crash</div>' will cause an immediate crash.
To reproduce the bug, view a page containing that CSS string with the Mac OS X nightly build of WebKit.
Now checking the Windows nightly...
Created attachment 28152 [details]
A log of the crash. Ignore the SIMBL plugins.
Similar to bug 24252.
Fixed by bug 24252.
*** This bug has been marked as a duplicate of 24252 ***