Apparently this can crash too!

indra/newview/llviewerobjectlist.cpp

@@ -842,7 +842,7 @@ void LLViewerObjectList::updateApparentAngles(LLAgent &agent)
 	for (i = mCurLazyUpdateIndex; i < max_value; i++)
 	{
 		objectp = mObjects[i];
-		if (!objectp->isDead())
+		if (objectp && !objectp->isDead())
 		{
 			num_objects++;