Have you tried dropping a breakpoint on line 610 of Array.h and tracing through the call stack to isolate the crash culprit?