Crash in Safari on iOS (works on OS X)

gistfile1.txt

* thread #1: tid = 0x1c03, 0x03fd57e7 WebCore`WebCore::RenderBox::canBeScrolledAndHasScrollableArea() const + 55, stop reason = EXC_BAD_ACCESS (code=1, address=0xdfbee815)
    frame #0: 0x03fd57e7 WebCore`WebCore::RenderBox::canBeScrolledAndHasScrollableArea() const + 55
    frame #1: 0x03f3872b WebCore`WebCore::Node::defaultEventHandler(WebCore::Event*) + 683
    frame #2: 0x03904c4b WebCore`WebCore::HTMLInputElement::defaultEventHandler(WebCore::Event*) + 859
    frame #3: 0x037bb7e8 WebCore`WebCore::EventDispatcher::dispatchEventPostProcess(void*) + 312
    frame #4: 0x037bb46b WebCore`WebCore::EventDispatcher::dispatch() + 955
    frame #5: 0x037bbc01 WebCore`WebCore::EventDispatchMediator::dispatchEvent(WebCore::EventDispatcher*) const + 17
    frame #6: 0x037ba46a WebCore`WebCore::EventDispatcher::dispatchEvent(WebCore::Node*, WTF::PassRefPtr<WebCore::EventDispatchMediator>) + 138
    frame #7: 0x03f376c3 WebCore`WebCore::Node::dispatchEvent(WTF::PassRefPtr<WebCore::Event>) + 163
    frame #8: 0x037d5a41 WebCore`WebCore::EventTarget::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, int&) + 113
    frame #9: 0x037c6d72 WebCore`WebCore::EventHandler::dispatchTouchEvent(WebCore::PlatformTouchEvent const&, WTF::AtomicString const&, WTF::HashMap<WebCore::EventTarget*, WTF::Vector<WTF::RefPtr<WebCore::Touch>, 0ul, WTF::CrashOnOverflow>*, WTF::PtrHash<WebCore::EventTarget*>, WTF::HashTraits<WebCore::EventTarget*>, WTF::HashTraits<WTF::Vector<WTF::RefPtr<WebCore::Touch>, 0ul, WTF::CrashOnOverflow>*> > const&, float, float) + 914
    frame #10: 0x037c8d94 WebCore`WebCore::EventHandler::handleTouchEvent(WebCore::PlatformTouchEvent const&) + 6516
    frame #11: 0x037c50c2 WebCore`WebCore::EventHandler::touchEvent(WebEvent*) + 66
    frame #12: 0x0530d420 WebKit`-[WebHTMLView touch:] + 80
    frame #13: 0x0438738c WebCore`-[WAKView _selfHandleEvent:] + 124
    frame #14: 0x043872e3 WebCore`-[WAKView handleEvent:] + 67
    frame #15: 0x0438a72d WebCore`-[WAKWindow sendEventSynchronously:] + 349
    frame #16: 0x02a6e1f8 UIKit`-[UIWebBrowserView _dispatchWebEvent:] + 88
    frame #17: 0x02a6e6cc UIKit`-[UIWebBrowserView _webTouchEventsRecognized:] + 499
    frame #18: 0x01c3d81f libobjc.A.dylib`-[NSObject performSelector:withObject:] + 70
    frame #19: 0x02801f58 UIKit`-[UIWebTouchEventsGestureRecognizer _processTouches:withEvent:type:] + 385
    frame #20: 0x02802120 UIKit`-[UIWebTouchEventsGestureRecognizer touchesBegan:withEvent:] + 194
    frame #21: 0x02604a5c UIKit`-[UIWindow _sendGesturesForEvent:] + 541
    frame #22: 0x02605c6a UIKit`-[UIWindow sendEvent:] + 1030
    frame #23: 0x025d9a36 UIKit`-[UIApplication sendEvent:] + 242
    frame #24: 0x025c3d9f UIKit`_UIApplicationHandleEventQueue + 11421
    frame #25: 0x005148af CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 15
    frame #26: 0x0051423b CoreFoundation`__CFRunLoopDoSources0 + 235
    frame #27: 0x0053130e CoreFoundation`__CFRunLoopRun + 910
    frame #28: 0x00530b33 CoreFoundation`CFRunLoopRunSpecific + 467
    frame #29: 0x0053094b CoreFoundation`CFRunLoopRunInMode + 123
    frame #30: 0x013d59d7 GraphicsServices`GSEventRunModal + 192
    frame #31: 0x013d57fe GraphicsServices`GSEventRun + 104
    frame #32: 0x025c694b UIKit`UIApplicationMain + 1225
    frame #33: 0x0005ce38 MobileSafari`___lldb_unnamed_function1939$$MobileSafari + 2004
    frame #34: 0x05d85725 libdyld.dylib`start + 1