When visiting this page (e.g. with the demo browser), I get a segfault with this (rather unhelpful, even with debugging symbols) backtrace:
#0 JSC::DFG::prepareOSREntry (exec=exec@entry=0x7fff87c0ffa0, codeBlock=codeBlock@entry=0x7fff63fddb00,
bytecodeIndex=bytecodeIndex@entry=0) at dfg/DFGOSREntry.cpp:121
#1 0x00007ffff731f27f in JSC::cti_optimize (args=0x7fffffffbf90) at jit/JITStubs.cpp:2061
#2 0x00007fffa039590c in ?? ()
#3 0x00007fffe456b950 in ?? ()
#4 0x00007fff00000000 in ?? ()
#5 0x00007fff61e7da28 in ?? ()
#6 0x00007fff65cf0a30 in ?? ()
#7 0x00007fff61e5b600 in ?? ()
#8 0x00000004634391c8 in ?? ()
#9 0x00007fff63439180 in ?? ()
#10 0x00007fff628c4410 in ?? ()
#11 0x00007fffffffc150 in ?? ()
#12 0x00007fffa03c7ce0 in ?? ()
#13 0x00007fffe446e290 in ?? ()
#14 0x00007fff87c0ffa0 in ?? ()
#15 0x0000000000000000 in ?? ()