Regression from #12431: the loop to clear all surviving pages neglects to check for entries in `m_pages` which have already been closed, fully destructed, and therefore replaced by NULL pointers.
Zack Weinberg