This demo crashes in TOT (e.g. nightly r89812) on SL.
Created attachment 99316 [details]
Created attachment 99527 [details]
Committed r90282: <http://trac.webkit.org/changeset/90282>
(In reply to comment #5)
> No testcase?
Not feasible -- the most reliable testcase i could create took 20 seconds to run, and even then didn't fire all that often. In the past i've been told off for tests that took 5 seconds so 20 seemed excessive.