WIP: ~HashTableAddResult crashes in oilpan builds

Source/wtf/HashTable.h

 /*
  * Copyright (C) 2005, 2006, 2007, 2008, 2011, 2012 Apple Inc. All rights reserved.
  * Copyright (C) 2008 David Levin <levin@chromium.org>
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 270 matching lines @@
         }
 
         ~HashTableAddResult()
         {
             // If rehash happened before accessing storedValue, it's
             // use-after-free. Any modification may cause a rehash, so we check
             // for modifications here.
             // Rehash after accessing storedValue is harmless but will assert if
             // the AddResult destructor takes place after a modification. You
             // may need to limit the scope of the AddResult.
+            fprintf(stderr, "%ld %ld\n", m_containerModifications, m_container->modifications());
             ASSERT_WITH_SECURITY_IMPLICATION(m_containerModifications == m_container->modifications());
         }
 
         ValueType* storedValue;
         bool isNewEntry;
 
 #if ENABLE(SECURITY_ASSERT)
-    private:
         const HashTableType* m_container;
         const int64_t m_containerModifications;
 #endif
     };
 
     template<typename Value, typename Extractor, typename KeyTraits>
     struct HashTableHelper {
         static bool isEmptyBucket(const Value& value) { return isHashTraitsEmptyValue<KeyTraits>(Extractor::extract(value)); }
         static bool isDeletedBucket(const Value& value) { return KeyTraits::isDeletedValue(Extractor::extract(value)); }
         static bool isEmptyOrDeletedBucket(const Value& value) { return isEmptyBucket(value) || isDeletedBucket(value); }
@@ skipping 1034 matching lines @@
         CollectionIterator end(toBeRemoved.end());
         for (CollectionIterator it(toBeRemoved.begin()); it != end; ++it)
             collection.remove(*it);
     }
 
 } // namespace WTF
 
 #include "wtf/HashIterators.h"
 
 #endif // WTF_HashTable_h