"In apply_changeset the derivation index aren't sanitized. It could include a hardened index, which would break an invariant and trigger an internal crash."