I can crash exampleN06, (G4Scintillation and G4Decay AtRestDoIt)

#0  0x081753dc in G4SteppingManager::InvokeAtRestDoItProcs() ()
(gdb) where
#0  0x081753dc in G4SteppingManager::InvokeAtRestDoItProcs() ()
#1  0x081770dd in G4SteppingManager::Stepping() ()
#2  0x08169321 in G4TrackingManager::ProcessOneTrack(G4Track*) ()
#3  0x081572a0 in G4EventManager::DoProcessing(G4Event*) ()
#4  0x08142849 in G4RunManager::DoEventLoop(int, char const*, int) ()
#5  0x08142308 in G4RunManager::BeamOn(int, char const*, int) ()
#6  0x0814b2df in G4RunMessenger::SetNewValue(G4UIcommand*, G4String) ()
#7  0x08253abc in G4UIcommand::DoIt(G4String) ()
#8  0x0826167b in G4UImanager::ApplyCommand(char const*) ()
#9  0x0826a4ae in G4UIbatch::SessionStart() ()
#10 0x0825f8cd in G4UImanager::ExecuteMacroFile(char const*) ()
#11 0x0826f117 in G4UIcontrolMessenger::SetNewValue(G4UIcommand*, G4String) ()
#12 0x08253abc in G4UIcommand::DoIt(G4String) ()
#13 0x0826167b in G4UImanager::ApplyCommand(char const*) ()
#14 0x0804f98b in main ()
#15 0x42015704 in __libc_start_main () from /lib/tls/libc.so.6

 by changing in ExN06PhysicsList.cc to:

void ExN06PhysicsList::ConstructGeneral()
{
  // Add Decay Process
  G4Decay* theDecayProcess = new G4Decay();
  theParticleIterator->reset();
  while( (*theParticleIterator)() ){
    G4ParticleDefinition* particle = theParticleIterator->value();
    G4ProcessManager* pmanager = particle->GetProcessManager();
    if (theDecayProcess->IsApplicable(*particle)) {
      pmanager ->AddProcess(theDecayProcess);
      // set ordering for PostStepDoIt and AtRestDoIt
      pmanager ->SetProcessOrdering(theDecayProcess, idxPostStep);
      pmanager ->SetProcessOrdering(theDecayProcess, idxAtRest);
    }
  }
}

i.e. add "decay at rest" as copied from N03.

and change in exampleN06.in to mu+:

/gun/particle mu+

The problem is in G4SteppingManager2.cc at:

// invoke selected process
   for(size_t np=0; np < MAXofAtRestLoops; np++){
   //
   // Note: DoItVector has inverse order against GetPhysIntVector
   //       and SelectedAtRestDoItVector.
   //
     if( (*fSelectedAtRestDoItVector)[MAXofAtRestLoops-np-1] != InActivated){

       fCurrentProcess = (*fAtRestDoItVector)[np];
       fParticleChange
         = fCurrentProcess->AtRestDoIt( *fTrack, *fStep);

MAXofAtRestLoops == 2 as it should, but when np == 1, the pointer
fCurrentProcess is NULL - BINGO:

fCurrentProcess->AtRestDoIt