Segfault when mapping over function returned by function

[andreasnoack]

This only happens without inlining, i.e. julia --inline=no and only after #13412 was merged. The error came up in StatsBase.jl, but it is reproducible by the code below

function ecdf{T<:Real}(X::Vector{T})
    Xs = sort(X)
    n = length(X)

    ef{T<:Real}(x::T) = searchsortedlast(Xs, x) / n

    function ef{T<:Real}(v::Vector{T})
        ord = sortperm(v)
        m = length(v)
        r = Array(T, m)
        r0 = 0

        i = 1
        for x in Xs
            while i <= m && x > v[ord[i]]
                r[ord[i]] = r0
                i += 1
            end
            r0 += 1
            if i > m 
                break 
            end
        end
        while i <= m
            r[ord[i]] = n
            i += 1
        end
        return r / n
    end

    return ef
end

map(ecdf([-1.0,1.0]), [1.0])

cc: @JeffBezanson