The plot thickens. After removing the base class leak detector I get a crash in the actual app when beginning an undo transaction, with the debugger complaining about an access violation on a const string. According to @jules this is likely because of a dangling pointer, which is believed to be the culprit already, so I guess there is in fact some kind of problem with the code…?