This is what I get on regular trunk ==9727== Invalid read of size 8 ==9727== at 0xF66D30: pbvh_bmesh_node_limit_ensure (pbvh_bmesh.c:248) ==9727== by 0xF6BF71: BKE_pbvh_build_bmesh (pbvh_bmesh.c:1020) ==9727== by 0xE44032: cdDM_getPBVH (cdderivedmesh.c:270) ==9727== by 0xE1B09C: mesh_build_data (DerivedMesh.c:2147) ==9727== by 0xE1B28A: mesh_get_derived_final (DerivedMesh.c:2195) ==9727== by 0x7D9DA5: draw_mesh_fancy (drawobject.c:3051) ==9727== by 0x7DAB81: draw_mesh_object (drawobject.c:3342) ==9727== by 0x7E3DCA: draw_object (drawobject.c:6420) ==9727== by 0x7A7DB2: view3d_main_area_draw_objects (view3d_draw.c:3262) ==9727== by 0x7A8454: view3d_main_area_draw (view3d_draw.c:3401) ==9727== by 0xACB354: ED_region_do_draw (area.c:452) ==9727== by 0x6BF2DE: wm_method_draw_triple (wm_draw.c:612) ==9727== by 0x6BFAE6: wm_draw_update (wm_draw.c:834) ==9727== by 0x6BB686: WM_main (wm.c:453) ==9727== by 0x6BA9C6: main (creator.c:1579) ==9727== Address 0xbfaa6f9cbe804908 is not stack'd, malloc'd or (recently) free'd