Are you sure you're seeing the same crash (the dump file from your JRE indicates that it's in the soup_session_feature_detach() call)? The fix for this was a simple null check, and I haven't heard of anyone else seeing it since the fix went in. Maybe you're seeing bug 400626?
(In reply to Jeremiah Renfro from comment #33)
Are you sure you're seeing the same crash (the dump file from your JRE indicates that it's in the soup_session_ feature_ detach( ) call)? The fix for this was a simple null check, and I haven't heard of anyone else seeing it since the fix went in. Maybe you're seeing bug 400626?