I see this too. My signatures are identical to the one of Eric: [@ js::TraceRecorder::prop ] Disabling MethodJIT work around the problem. Note: that the problem seems also to happen on Windows, with a slightly different signature: http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2010-09-12%2019%3A00%3A00&signature=js%3A%3ATraceRecorder%3A%3Aprop%28JSObject*%2C%20nanojit%3A%3ALIns*%2C%20unsigned%20long*%2C%20nanojit%3A%3ALIns**%2C%20js%3A%3AValue*%29&version=Firefox%3A4.0b6pre Comments left by user indicates "clicking edit page", which is exactly what we do on the MDC.
I can see this on Mac on the latest nightly when I enable the rich text editor in wiki.m.o
I can't reproduce this with tm-tip or the latest nightly on wiki.m.o. I can't confirm the original STR, devmo won't let me create an account (I get some error about an expired MindTouch license). Can anyone confirm if this is still a bug?
This does appear to be fixed.