https://www.ibm.com/support/pages/apar/IV58707
IV58707: CRASH OR NULLPOINTEREXCEPTION IN JITTED CODE
Error Message: A variable acquires an incorrect value. Many symptoms are possible, but most likely outcome is a crash with
crashnullpointerexceptioncode
https://bugzilla.mozilla.org/show_bug.cgi?id=503620
503620 - TM: crash in JITted code with property iteration after calling method from prototype chain
RESOLVED (jwalden) in Core - JavaScript Engine. Last updated 2013-01-04.