Comment 2 for bug 354688

Readily reproducible for me here, so if more info is needed, let me know.

The crash appears (based on a disassembly of the function with gdb - nothing so proper as catching a crash in action) to be happening at the line

    set_domain.handle = bo_gem->gem_handle;

when dereferencing bo_gem.