Comment 4 for bug 1946661

The crash point of sourse code is:
WL_EXPORT struct wl_proxy *
wl_proxy_marshal_constructor(struct wl_proxy *proxy, uint32_t opcode,
        const struct wl_interface *interface, ...)
{
 union wl_argument args[WL_CLOSURE_MAX_ARGS];
 va_list ap;

 va_start(ap, interface);
 wl_argument_from_va_list(proxy->object.interface->methods[opcode].signature,
     args, WL_CLOSURE_MAX_ARGS, ap);
 va_end(ap);

 return wl_proxy_marshal_array_constructor(proxy, opcode,
        args, interface);
}