I finally tried commit eaadf820633e74350404d009a1c251f6319454aa
and it segfaults right away:
  ruby -rcoverage -e 'Coverage.start; require "tempfile"'
Backtrace here: http://yhbt.net/feature-9508.bt.txt