Segmentation fault when Tor Browser 3.5 has a ton of state.
To reproduce this bug, spend all day on Twitter clicking a bunch of links and never get a new identity. This is the only way I have been able to consistently get enough state in my browser to trigger the crash. I have a core file, but I would prefer to send it to interested developers over PGP because I have no idea how much information it contains. This is the TBB version I used: https://lists.torproject.org/pipermail/tor-qa/2013-December/000283.html