<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [GTK] ASSERTION FAILED: m_eventListeners.isEmpty()"
   href="https://bugs.webkit.org/show_bug.cgi?id=153973#c1">Comment # 1</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [GTK] ASSERTION FAILED: m_eventListeners.isEmpty()"
   href="https://bugs.webkit.org/show_bug.cgi?id=153973">bug 153973</a>
              from <span class="vcard"><a class="email" href="mailto:mcatanzaro&#64;igalia.com" title="Michael Catanzaro &lt;mcatanzaro&#64;igalia.com&gt;"> <span class="fn">Michael Catanzaro</span></a>
</span></b>
        <pre>100% reproducible on <a href="http://www.philly.com">http://www.philly.com</a>. Load this page:

<a href="http://www.philly.com/philly/food/Pizzagate-target-Philly-favorites-Pizza-Brain-and-Little-Babys-.html">http://www.philly.com/philly/food/Pizzagate-target-Philly-favorites-Pizza-Brain-and-Little-Babys-.html</a>

Then close it. It will crash. I added some debug in StorageManager.cpp:

createLocalStorageMap: this=0x7f5afcfee3c0 storageMapID=1 storageNamespaceID=1
addListener: this=0x7f5aa7ba9150 storageMapID=1
createSessionStorageMap: this=0x7f5afcfee3c0 storageMapID=2 storageNamespaceID=3
addListener: this=0x7f5aa7ba9230 storageMapID=2
createTransientLocalStorageMap: this=0x7f5afcfee3c0 storageMapID=3 storageNamespaceID=1
addListener: this=0x7f5aa7ba93f0 storageMapID=3
createSessionStorageMap: this=0x7f5afcfee3c0 storageMapID=4 storageNamespaceID=3
addListener: this=0x7f5aa7ba94d0 storageMapID=4
createTransientLocalStorageMap: this=0x7f5afcfee3c0 storageMapID=5 storageNamespaceID=1
addListener: this=0x7f5aa7ba94d0 storageMapID=5
processDidCloseConnection: this=0x7f5afcfee3c0
operator(): this=0x7f5afcfee3c0 removing listener...
removeListener: this=0x7f5aa7ba93f0 storageMapID=3
operator(): this=0x7f5afcfee3c0 removing listener...
removeListener: this=0x7f5aa7ba9150 storageMapID=1
operator(): this=0x7f5afcfee3c0 removing listener...
removeListener: this=0x7f5aa7ba94d0 storageMapID=5
operator(): this=0x7f5afcfee3c0 removing listener...
removeListener: this=0x7f5aa7ba9230 storageMapID=2
~StorageArea: this=0x7f5aa7ba9150 empty=1
~StorageArea: this=0x7f5aa7ba9230 empty=1
~StorageArea: this=0x7f5aa7ba94d0 empty=0
ASSERTION FAILED: m_eventListeners.isEmpty()
../../Source/WebKit2/UIProcess/Storage/StorageManager.cpp(180) : WebKit::StorageManager::StorageArea::~StorageArea()

So the problem is the listener for the second session storage map (storageMapID=4) is not being removed.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>