Interpreter crashes due to incorrect refcounting of cached structures.
Created attachment 54964 [details] Patch
<rdar://problem/7926160>
Comment on attachment 54964 [details] Patch r=me Please mention the Radar bug number in the ChangeLog.
Committed r58705: <http://trac.webkit.org/changeset/58705>