Crash when clicking a link in GMail

[humdinger]

This is hrev52031, 32bit.

When I click on a link to e.g. GitHub or Trac ticket in an email in Gmail, a new tab opens and a BAlert saying:

There are pending requests to the server. You may
lose recent changes by navigating away.
[Yes] [No]

Ignoring the awkwardly named buttons... If I press "No", I can continue with the page in the new tab, but the alert keeps popping up every few seconds.
If I press "Yes", I get a crash (full report attached):

state: Exception (Segment violation)

Frame		IP			Function Name
-----------------------------------------------
0x72ce4bc8	0x471768e	WTF::RefCountedArray<JSC::LLIntCallLinkInfo>::~RefCountedArray() + 0x6e 
	Disassembly:
		WTF::RefCountedArray<JSC::LLIntCallLinkInfo>::~RefCountedArray():

[humdinger]

crash after clicking "Yes"

[humdinger]

Does not happen when using GMail's basic HTML view. The page that opens in a new tab does not load on its own though. Have to hit the "Reload" button, but then it loads without any alerts or crashes.

[humdinger]

With haikuwebkit 1.6.9 Web+ doesn't crash anymore when clicking "Yes", but I'm being logged out from GMail's webinterface. Getting better... :)