Hi,
So I managed to reproduce the crash and a protection has been added in the master branch of ROOT (commit 73a488b). But I would advise to not build ROOT with Qt anyway, since this is not needed at all for embedding a TCanvas in a Qt application (as you know)
Cheers, Bertrand.