A crach caused by nullptr access in OnRegistrationChanged() was reported on the mailing list.
It is not clear who this invalid state was reacht, but nullptr checks before calling the Modified() functions wouldn't heard, i guess.