@ally Did you try it with a unidirectional LFO? or pitch mods other than an envelope?
I can confirm that if you load a unipolar pitch envelope the crash does not happen. But it seems to be the exception. It is happening to me with other unipolar pitch mods like LFOs and even a simple constant modulator. It is also crashing sometimes when attempting to save the xml while sound is playing.