Windows XP
TM: opening history in firefox asserts with chrome JIT enabled "Assertion failure: (traceMonitor->globalSlots->data()[n]) < (uint32)(globalObj)->dslots[-1], at s:/mozilla/mozilla/js/src/jstracer.cpp:1353"
JavaScript Engine