two map crashes

Originally posted by missingshrink
http://www.eathena.w...er&showbug=4214

Just experienced two map crashes:

Core was generated by `./map-server_sql'.
Program terminated with signal 11, Segmentation fault.
[New process 16254]
#0  db_obj_vforeach (self=0xb7efede4, func=0x80d87a0 <skill_unit_timer_sub>,
    args=0xbfc12628 "v\022/q*8") at db.c:1871
1871                            if (!(node->deleted))
(gdb) bt full
#0  db_obj_vforeach (self=0xb7efede4, func=0x80d87a0 <skill_unit_timer_sub>,
    args=0xbfc12628 "v\022/q*8") at db.c:1871
        db = <value optimized out>
        i = 104
        sum = 0
        node = (struct dbn *) 0xffffffff
        parent = (struct dbn *) 0x0
#1  0x0813f716 in db_obj_foreach (self=0x0, func=0x80d87a0 <skill_unit_timer_sub>)
    at db.c:1921
        args = 0xbfc12628 "v\022/q*8"
        ret = <value optimized out>
#2  0x080d8426 in skill_unit_timer (tid=8, tick=1898910326, id=0, data=0)
    at skill.c:10487
No locals.
#3  0x0813dd52 in do_timer (tick=1898910358) at timer.c:330
        tid = 8
        diff = -32
        __FUNCTION__ = "do_timer"
#4  0x0813b3ce in main (argc=1, argv=0xbfc12754) at core.c:253
        next = <value optimized out>


----------------------------------------------------


Core was generated by `./map-server_sql'.
Program terminated with signal 11, Segmentation fault.
[New process 18189]
#0  skill_delunitgroup (group=0x0) at skill.c:10169
10169           src=map_id2bl(group->src_id);
(gdb) bt full
#0  skill_delunitgroup (group=0x0) at skill.c:10169
        src = <value optimized out>
        ud = (struct unit_data *) 0xbfe55b98
        i = <value optimized out>
        j = <value optimized out>
        __FUNCTION__ = "skill_delunitgroup"
#1  0x0809517a in status_change_end (bl=0xe922230, type=SC_DANCING, tid=143)
    at status.c:6492
        dsd = <value optimized out>
        dsc = <value optimized out>
        group = (struct skill_unit_group *) 0x0
        sd = (struct map_session_data *) 0xe922230
        sc = (struct status_change *) 0xe9224c8
        sce = (struct status_change_entry *) 0xacd391ec
        status = (struct status_data *) 0xe922478
        vd = (struct view_data *) 0xe922414
        opt_flag = <value optimized out>
        calc_flag = <value optimized out>
        __FUNCTION__ = "status_change_end"
#2  0x0813dd52 in do_timer (tick=1898980336) at timer.c:330
        tid = 143
        diff = -8
        __FUNCTION__ = "do_timer"
#3  0x0813b3ce in main (argc=1, argv=0xbfe55d14) at core.c:253
        next = <value optimized out>



Any ideas?