Comment 9 for bug 22372

for the record, patch is still discussed on vendor-sec; it converts the crash to
an eternal hang in a futex, which solves the security problem, but can certainly
be enhanced a bit further.