This seems like an obvious mistake (the superfluous &) with an easy fix. However, I have never see the code crash here so I am now wondering whether I am not just crazy...
@jch could you confirm that the change indeed makes sense to you?