MuseScore Studio crashes upon inserting Text Frame after cross-stave notes with slur

[basaigh]

Issue type

Crash or freeze

Bug description

This only appears to happen in large scores, if there are other criteria I haven't been able to find them.

Steps to reproduce

UPDATE see @zacjansheski 's comment for minimal reproduction steps

1. Open a score with cross-stave notes with a slur
2. Add a text frame after cross-stave notes with a slur
3. Observe MuseScore Studio crash

Screenshots/Screen recordings

Recording.2024-06-18.223936.mp4

MuseScore Version

OS: Windows 11 Version 2009 or later, Arch.: x86_64, MuseScore Studio version (64-bit): 4.4.0-241700506, revision: github-musescore-musescore-d60cca9

Regression

Yes, this used to work in a previous version of MuseScore 4.x
Works in 4.3.2, crashes in 4.4

Operating system

Windows 11

Additional context

Music from FROZEN.zip

[zacjansheski]

It has to do with the harp part, no crash after deleting

The minimal way to reproduce the crash is to add a text frame after two cross-stave notes with a slur

1. Open "Grand Staff" template
2. Write two cross-stave notes with a slur
3. Add a text frame after the notes
4. Crash

video1020198130.mp4

[Jojo-Schmitz]

I can't reproduce with that, in latest code from master.

Edit: sorry, I can, forgot the slur (reading helps ;-))

And I believe to have found the (or one) culprit, a nullptr deferefences in MeasureBase::top()