javascript custom event crash

works on iPhone 4s.
Discovered by Ryan Berdeen.

Demonstrated on:
http://static.ryanberdeen.com/share/2011/01/customevent-crash.html

rdar://8870365