Yesterday Mozilla released their jsfunfuzz tool at the Blackhat convention in Las Vegas. The tool is very useful for stress-testing the javascript engine and its stability. While running the tool, we found four crashers - one of which might have some security implications.

Here is a build that should address all of the issues: test it, give it a spin with the tool - and please report any crashers you might find with the fuzzer