When you verify the accompanying query on the accompanying model (I have trimmed the model and query a lot from my original, and this one still segfaults). If I change the value of mx_lost in the model from 1 to 0 the segfault does not occur. If I remove the bit "and rec_time == 0" from the query, the segfault also does not occur.
Created attachment 48 [details] Model
Created attachment 49 [details] Query
Confirmed.
A fix has been committed to CVS (it was a missing exclamation mark). The problem is triggered by expressions over clocks in liveness or leadsto properties.