jsc;s ScriptController added refs to the Frame to protect it during certain javascript calls in the following changes: * http://trac.webkit.org/changeset/42409 * http://trac.webkit.org/changeset/42417 v8's version should have the same ref count protections to avoid similar crashes.
Created attachment 30923 [details] Proposed fix.
Committed as http://trac.webkit.org/changeset/44391