I think this is probably the most important bug in VE at the moment, and it's sad to see no progress being made on it, so I got a backtrace from stock Chromium in Ubuntu 12.04:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffcd87e700 (LWP 2767)]
WebCore::AppendNodeCommand::AppendNodeCommand (this=0x14b6f1e5eea0, parent=..., node=...)
    at third_party/WebKit/Source/core/editing/AppendNodeCommand.cpp:39
39	third_party/WebKit/Source/core/editing/AppendNodeCommand.cpp: No such file or directory.
(gdb) bt
#0  WebCore::AppendNodeCommand::AppendNodeCommand (this=0x14b6f1e5eea0, parent=..., node=...)
    at third_party/WebKit/Source/core/editing/AppendNodeCommand.cpp:39
#1  0x000055555752af66 in create (node=..., parent=...)
    at third_party/WebKit/Source/core/editing/AppendNodeCommand.h:37
#2  WebCore::CompositeEditCommand::appendNode (this=0x14b6f44c0800, node=..., parent=...)
    at third_party/WebKit/Source/core/editing/CompositeEditCommand.cpp:372
#3  0x0000555557535512 in WebCore::DeleteSelectionCommand::makeStylingElementsDirectChildrenOfEditableRootToPreventStyleLoss (this=0x14b6f44c0800) at third_party/WebKit/Source/core/editing/DeleteSelectionCommand.cpp:431
#4  0x0000555557538582 in WebCore::DeleteSelectionCommand::handleGeneralDelete (this=0x14b6f44c0800)
    at third_party/WebKit/Source/core/editing/DeleteSelectionCommand.cpp:445
#5  0x000055555753a2e5 in WebCore::DeleteSelectionCommand::doApply (this=0x14b6f44c0800)
    at third_party/WebKit/Source/core/editing/DeleteSelectionCommand.cpp:836
#6  0x00005555575273d2 in WebCore::CompositeEditCommand::apply (this=0x14b6f44c0800)
    at third_party/WebKit/Source/core/editing/CompositeEditCommand.cpp:202
#7  0x000055555725c6f4 in deleteSelectionWithSmartDelete (smartDelete=false, this=<optimized out>)
    at third_party/WebKit/Source/core/editing/Editor.cpp:340
#8  WebCore::Editor::deleteSelectionWithSmartDelete (this=<optimized out>, smartDelete=false)
    at third_party/WebKit/Source/core/editing/Editor.cpp:335
#9  0x000055555726498a in WebCore::Editor::cut (this=0x14b6f2019180)
    at third_party/WebKit/Source/core/editing/Editor.cpp:982
#10 0x000055555726c08f in executeCut (frame=0x14b6f2d5cc00, source=<optimized out>)
    at third_party/WebKit/Source/core/editing/EditorCommand.cpp:301
#11 WebCore::executeCut (frame=0x14b6f2d5cc00, source=<optimized out>)
    at third_party/WebKit/Source/core/editing/EditorCommand.cpp:297
#12 0x00005555569cd7ee in WebKit::WebFrameImpl::executeCommand (this=0x14b6f2d7ca80, name=..., value=...)
    at third_party/WebKit/Source/WebKit/chromium/src/WebFrameImpl.cpp:1243
#13 0x00005555583d50e1 in content::RenderViewImpl::handleCurrentKeyboardEvent (this=<optimized out>)
    at content/renderer/render_view_impl.cc:2201
#14 0x0000555556a155ba in WebKit::EditorClientImpl::handleKeyboardEvent (this=0x14b6f2bd45a0, evt=0x14b6f379f700)
    at third_party/WebKit/Source/WebKit/chromium/src/EditorClientImpl.cpp:643
#15 0x00005555573f9d13 in WebCore::EventHandler::defaultKeyboardEventHandler (this=0x14b6f1464c80, 
    event=0x14b6f379f700) at third_party/WebKit/Source/core/page/EventHandler.cpp:3121
#16 0x0000555556acdad8 in WebCore::Node::defaultEventHandler (this=0x14b6f40364e0, event=0x14b6f379f700)
    at third_party/WebKit/Source/core/dom/Node.cpp:2546
---Type <return> to continue, or q <return> to quit---
#17 0x0000555556b13822 in dispatchEventPostProcess (preDispatchEventHandlerResult=0x0, this=0x7fffcd87bdb0)
    at third_party/WebKit/Source/core/dom/EventDispatcher.cpp:208
#18 WebCore::EventDispatcher::dispatch (this=0x7fffcd87bdb0)
    at third_party/WebKit/Source/core/dom/EventDispatcher.cpp:127
#19 0x0000555556b1337e in WebCore::EventDispatcher::dispatchEvent (node=<optimized out>, mediator=...)
    at third_party/WebKit/Source/core/dom/EventDispatcher.cpp:56
#20 0x0000555556ace21b in WebCore::Node::dispatchEvent (this=0x14b6f40364e0, event=...)
    at third_party/WebKit/Source/core/dom/Node.cpp:2426
#21 0x0000555556abd15d in WebCore::EventTarget::dispatchEvent (this=0x14b6f40364e0, event=..., ec=<optimized out>)
    at third_party/WebKit/Source/core/dom/EventTarget.cpp:148
#22 0x00005555573fc181 in WebCore::EventHandler::keyEvent (this=0x14b6f1464c80, initialKeyEvent=...)
    at third_party/WebKit/Source/core/page/EventHandler.cpp:3006
#23 0x00005555569f3ccb in WebKit::WebViewImpl::handleKeyEvent (this=0x14b6f2bd4500, event=...)
    at third_party/WebKit/Source/WebKit/chromium/src/WebViewImpl.cpp:987
#24 0x00005555569f743b in WebKit::WebViewImpl::handleInputEvent (this=0x14b6f2bd4500, inputEvent=...)
    at third_party/WebKit/Source/WebKit/chromium/src/WebViewImpl.cpp:2024
#25 0x00005555583f92b3 in content::RenderWidget::OnHandleInputEvent (this=0x14b6f2b41000, 
    input_event=0x14b6f38f7898, is_keyboard_shortcut=true) at content/renderer/render_widget.cc:756
#26 0x00005555583f7c5e in DispatchToMethod<content::RenderWidget, void (content::RenderWidget::*)(WebKit::WebInputEvent const*, bool), WebKit::WebInputEvent const*, bool> (method=<optimized out>, obj=0x14b6f2b41000, arg=...)
    at ./base/tuple.h:553
#27 Dispatch<content::RenderWidget, content::RenderWidget, void (content::RenderWidget::*)(WebKit::WebInputEvent const*, bool)> (func=
    (void (content::RenderWidget::*)(content::RenderWidget * const, const WebKit::WebInputEvent *, bool)) 0x5555583f90e0 <content::RenderWidget::OnHandleInputEvent(WebKit::WebInputEvent const*, bool)>, obj=0x14b6f2b41000, msg=
    0x14b6f38d9f88, sender=<optimized out>) at ./content/common/input_messages.h:39
#28 content::RenderWidget::OnMessageReceived (this=0x14b6f2b41000, message=...)
    at content/renderer/render_widget.cc:311
#29 0x00005555583ed784 in content::RenderViewImpl::OnMessageReceived (this=0x14b6f2b41000, message=...)
    at content/renderer/render_view_impl.cc:1124
#30 0x00005555566c8fa8 in content::MessageRouter::RouteMessage (this=<optimized out>, msg=...)
    at content/common/message_router.cc:49
#31 0x0000555556651a8b in OnMessageReceived (msg=..., this=0x14b6f14bcb88) at content/common/child_thread.cc:271
#32 content::ChildThread::OnMessageReceived (this=0x14b6f14bcb88, msg=...) at content/common/child_thread.cc:236
---Type <return> to continue, or q <return> to quit---
#33 0x00005555566280ba in IPC::ChannelProxy::Context::OnDispatchMessage (this=0x14b6f14bde00, message=...)
    at ipc/ipc_channel_proxy.cc:261
#34 0x0000555556296fae in Run (this=0x7fffcd87d958) at ./base/callback.h:396
#35 base::MessageLoop::RunTask (this=0x7fffcd87da50, pending_task=...) at base/message_loop.cc:484
#36 0x000055555629a70b in base::MessageLoop::DeferOrRunPendingTask (this=0x7fffcd87da50, pending_task=...)
    at base/message_loop.cc:496
#37 0x000055555629ad13 in DoWork (this=<optimized out>) at base/message_loop.cc:688
#38 base::MessageLoop::DoWork (this=0x7fffcd87da50) at base/message_loop.cc:667
#39 0x000055555629b459 in base::MessagePumpDefault::Run (this=0x14b6f149b7e0, delegate=0x7fffcd87da50)
    at base/message_pump_default.cc:29
#40 0x00005555562aa202 in base::RunLoop::Run (this=0x7fffcd87da10) at base/run_loop.cc:45
#41 0x0000555556296444 in base::MessageLoop::Run (this=<optimized out>) at base/message_loop.cc:321
#42 0x00005555562bb330 in base::Thread::ThreadMain (this=0x14b6f14a45a0) at base/threading/thread.cc:197
#43 0x00005555562b8001 in base::(anonymous namespace)::ThreadFunc (params=0x14b6f0a23650)
    at base/threading/platform_thread_posix.cc:95
#44 0x00007ffff3df9e9a in start_thread (arg=0x7fffcd87e700) at pthread_create.c:308
#45 0x00007ffff1ef0ccd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#46 0x0000000000000000 in ?? ()
(gdb) info locals
No locals.
(gdb) up
#1  0x000055555752af66 in create (node=..., parent=...)
    at third_party/WebKit/Source/core/editing/AppendNodeCommand.h:37
37	third_party/WebKit/Source/core/editing/AppendNodeCommand.h: No such file or directory.
(gdb) info locals
No locals.
(gdb) up
#2  WebCore::CompositeEditCommand::appendNode (this=0x14b6f44c0800, node=..., parent=...)
    at third_party/WebKit/Source/core/editing/CompositeEditCommand.cpp:372
372	third_party/WebKit/Source/core/editing/CompositeEditCommand.cpp: No such file or directory.
(gdb) info locals
No locals.
(gdb) up
#3  0x0000555557535512 in WebCore::DeleteSelectionCommand::makeStylingElementsDirectChildrenOfEditableRootToPreventStyleLoss (this=0x14b6f44c0800) at third_party/WebKit/Source/core/editing/DeleteSelectionCommand.cpp:431
431	third_party/WebKit/Source/core/editing/DeleteSelectionCommand.cpp: No such file or directory.
(gdb) info locals
rootEditableElement = {m_ptr = 0x0}
nextNode = {m_ptr = 0x14b6f3107ee0}
range = {m_ptr = 0x14b6f3e7f980}
node = {m_ptr = 0x14b6f2d83180}