fast/loader/stateobjects/popstate-after-load-complete-body-attribute.html failed on Leopard Debug Bot http://build.webkit.org/results/Leopard%20Intel%20Debug%20(Tests)/r56734%20(12099)/fast/loader/stateobjects/popstate-after-load-complete-body-attribute-stderr.txt ASSERTION FAILED: m_wrapper || !m_jsFunction (/Volumes/Big/WebKit-BuildSlave/leopard-intel-debug/build/WebCore/bindings/js/JSEventListener.h:84 JSC::JSObject* WebCore::JSEventListener::jsFunction(WebCore::ScriptExecutionContext*) const) http://trac.webkit.org/browser/trunk/LayoutTests/fast/loader/stateobjects/popstate-after-load-complete-body-attribute.html The ASSERT was added in http://trac.webkit.org/changeset/54400: http://trac.webkit.org/browser/trunk/WebCore/bindings/js/JSEventListener.h?annotate=blame&rev=54428#L84
Crashed again just now: http://build.webkit.org/results/Leopard%20Intel%20Debug%20(Tests)/r57021%20(12361)/fast/loader/stateobjects/popstate-after-load-complete-body-attribute-stderr.txt
Another: http://build.webkit.org/results/Leopard%20Intel%20Debug%20(Tests)/r57069%20(12411)/fast/loader/stateobjects/popstate-after-load-complete-body-attribute-stderr.txt
Again: http://build.webkit.org/results/Leopard%20Intel%20Debug%20(Tests)/r57179%20(12512)/fast/loader/stateobjects/popstate-after-load-complete-body-attribute-stderr.txt
Bug 37533 is hitting this ASSERT consistently.
I cannot reproduce this running the test 100 times on Mac (Mountain Lion). Tried. both normal mode and --run-singly.