Crash in CollectorBitmap::get at nbcolympics.com
Created attachment 47980 [details] Patch
Comment on attachment 47980 [details] Patch r=me Might be worth adding a comment that explains that m_offset does not include anonymous slots, and the true property offset requires adding the anonymous slot count.
Comment on attachment 47980 [details] Patch > + the effected cases by incorporating the anonymous slot count. It effected -> affected > + also removes the duplicate copy of anonymous slot count fro the fro -> from
Committed r54265: <http://trac.webkit.org/changeset/54265>