Insert a crash into browser.js, b2g_start_script.js, JNI.jsm (to be backed out)
Backed out changeset 5224561bbf4f DONTBUILD