We kill off unreachable blocks in arbitrary order. Therefore if there is a network of unreachable blocks, we may try to do unreachable-successor fix-up when the successor has already been deleted. Then we crash. This is hit by: inspector/styles/styles-computed-trace.html inspector/console/console-big-array.html
Created attachment 142810 [details] the patch
Landed in http://trac.webkit.org/changeset/117654