[troyb]

I personally cheated and found his crash in our database. If interested, this is the problem we're dealing with here:

Thread 0 Crashed:
0 -- 0x000000b4 -- start
1 -- 0x3456d29e -- __ZNK7WebCore4Font12isFixedPitchEv
2 -- 0x349bbf49 -- __ZN7WebCore11RenderBlock17findNextLineBreakERNS_1 2BidiResolverINS_14InlineIteratorENS_7BidiRunEEEbR bS6_PNS_6EClearE
3 -- 0x349be8ee -- __ZN7WebCore11RenderBlock20layoutInlineChildrenEbR iS1_
4 -- 0x3482069f -- __ZN7WebCore11RenderBlock11layoutBlockEb
5 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
6 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
7 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
8 -- 0x34894836 -- __ZN7WebCore27RenderTextControlSingleLine6layoutEv
9 -- 0x349be43e -- __ZN7WebCore11RenderBlock20layoutInlineChildrenEbR iS1_
10 -- 0x3482069f -- __ZN7WebCore11RenderBlock11layoutBlockEb
11 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
12 -- 0x349be43e -- __ZN7WebCore11RenderBlock20layoutInlineChildrenEbR iS1_
13 -- 0x3482069f -- __ZN7WebCore11RenderBlock11layoutBlockEb
14 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
15 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
16 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
17 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
18 -- 0x349be43e -- __ZN7WebCore11RenderBlock20layoutInlineChildrenEbR iS1_
19 -- 0x3482069f -- __ZN7WebCore11RenderBlock11layoutBlockEb
20 -- 0x348831d9 -- __ZN7WebCore15RenderTableCell6layoutEv
21 -- 0x34886fae -- __ZN7WebCore14RenderTableRow6layoutEv
22 -- 0x348898e1 -- __ZN7WebCore18RenderTableSection6layoutEv
23 -- 0x34882354 -- __ZN7WebCore11RenderTable6layoutEv
24 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
25 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
26 -- 0x348831d9 -- __ZN7WebCore15RenderTableCell6layoutEv
27 -- 0x34886fae -- __ZN7WebCore14RenderTableRow6layoutEv
28 -- 0x348898e1 -- __ZN7WebCore18RenderTableSection6layoutEv
29 -- 0x34882354 -- __ZN7WebCore11RenderTable6layoutEv
30 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
31 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
32 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
33 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
34 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
35 -- 0x348831d9 -- __ZN7WebCore15RenderTableCell6layoutEv
36 -- 0x34886fae -- __ZN7WebCore14RenderTableRow6layoutEv
37 -- 0x348898e1 -- __ZN7WebCore18RenderTableSection6layoutEv
38 -- 0x34882354 -- __ZN7WebCore11RenderTable6layoutEv
39 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
40 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
41 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
42 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
43 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
44 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
45 -- 0x3482013f -- __ZN7WebCore11RenderBlock19layoutBlockChildrenEbRi
46 -- 0x34820b99 -- __ZN7WebCore11RenderBlock11layoutBlockEb
47 -- 0x3480fb28 -- __ZN7WebCore11RenderBlock6layoutEv
48 -- 0x348a910b -- __ZN7WebCore10RenderView6layoutEv
49 -- 0x345a3414 -- __ZN7WebCore9FrameView6layoutEb
50 -- 0x34b62224 -- _sqlite3RunVacuum
51 -- 0x3496bffc -- __ZN7WebCore12ThreadTimers10fireTimersEdRKN3WTF6Ve ctorIPNS_9TimerBaseELm0EEE
52 -- 0x3496c1d8 -- __ZN7WebCore12ThreadTimers24sharedTimerFiredIntern alEv
53 -- 0x3496c23e -- __ZN7WebCore12ThreadTimers16sharedTimerFiredEv
54 -- 0x3494dca1 -- __ZN7WebCore10timerFiredEP16__CFRunLoopTimerPv
55 -- 0x9642eedb -- ___CFRunLoopRun
56 -- 0x9642c864 -- _CFRunLoopRunSpecific
57 -- 0x9642c691 -- _CFRunLoopRunInMode
58 -- 0x91878f0c -- _RunCurrentEventLoopInMode
59 -- 0x91878bff -- _ReceiveNextEventCommon
60 -- 0x91878b48 -- _BlockUntilNextEventMatchingListInMode
61 -- 0x927ceac5 -- __DPSNextEvent
62 -- 0x927ce306 -- -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
63 -- 0x0027bc3e -- -[OAAppKitQueueProcessor shouldProcessQueueEnd]
64 -- 0x003cddef -- -[OFQueueProcessor processQueueUntilEmpty:forTime:]
65 -- 0x0038759d -- -[OFQueueProcessor processQueueUntilEmpty:]
66 -- 0x003875cd -- -[OFQueueProcessor processQueueUntilEmpty]
67 -- 0x003876ee -- -[OFRunLoopQueueProcessor processQueueUntilEmpty]
68 -- 0x91503ff1 -- ___NSFireMachPort
69 -- 0x96432b72 -- ___CFMachPortPerform
70 -- 0x9642e8db -- ___CFRunLoopRun
71 -- 0x9642c864 -- _CFRunLoopRunSpecific
72 -- 0x9642c691 -- _CFRunLoopRunInMode
73 -- 0x91878f0c -- _RunCurrentEventLoopInMode
74 -- 0x91878cc3 -- _ReceiveNextEventCommon
75 -- 0x91878b48 -- _BlockUntilNextEventMatchingListInMode
76 -- 0x927ceac5 -- __DPSNextEvent
77 -- 0x927ce306 -- -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
78 -- 0x9279049f -- -[NSApplication run]
79 -- 0x00278867 -- -[OAApplication run]
80 -- 0x92788535 -- _NSApplicationMain
81 -- 0x0000f61f -- _main
82 -- 0x000027d2 -- __start
83 -- 0x000026f9 -- start