I went from 712->726

Sample crash code:
-----------------------------------------------------------------------------------------
--
-- main.lua
--
-----------------------------------------------------------------------------------------

-- Your code here

local onPhotoComplete = function(event)
local photo = event.target
if photo ~= nil then
photo:toFront()
local uuid = "TEST"
local baseDir = system.DocumentsDirectory
local filename = uuid .. "_thumb.jpg"
display.save(photo, filename, baseDir )
photo:removeSelf()
end
end

media.show( media.PhotoLibrary, onPhotoComplete )

pretty simple.

sample crash:

Jan 13 18:06:25 unknown TestApp[1259] : *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '*** -[NSPlaceholderString initWithUTF8String:]: NULL cString'
*** First throw call stack:
(0x373aa8bf 0x361891e5 0x373aa7b9 0x373aa7db 0x31c72a2b 0x24b97 0x88fe9 0x6bd89 0x78c53 0x6beab 0x65a19 0x6b6db 0x6c0c5 0x659f3 0x86b39 0x7e469 0x97471 0x2be57 0x2c0e3 0x2c22d 0x306457eb 0x3063f3bd 0x3060d921 0x3060d3bf 0x3060cd2d 0x35ebee13 0x3737e553 0x3737e4f5 0x3737d343 0x373004dd 0x373003a5 0x3063e457 0x3063b743 0x1cfdb 0x1cf94)
Jan 13 18:06:25 unknown UIKitApplication:com.colorforms.revolutionfreeipad[0x9a6c][1259] : terminate called throwing an exception
Jan 13 18:06:25 unknown kernel[0] : launchd[1259] Builtin profile: container (sandbox)
Jan 13 18:06:25 unknown kernel[0] : launchd[1259] Container: /private/var/mobile/Applications/80C9BC20-3DF1-4CC3-9EF8-B16FB63496F1 [69] (sandbox)
Jan 13 18:06:25 unknown ReportCrash[1261] : Formulating crash report for process TestApp[1259]
Jan 13 18:06:25 unknown com.apple.launchd[1] : (UIKitApplication:com.colorforms.revolutionfreeipad[0x9a6c]) Job appears to have crashed: Abort trap: 6
Jan 13 18:06:25 unknown SpringBoard[15] : Application 'TestApp' exited abnormally with signal 6: Abort trap: 6
Jan 13 18:06:25 unknown ReportCrash[1261] : Saved crashreport to /var/mobile/Library/Logs/CrashReporter/TestApp_2012-01-13-180625_Chris-iPad-2-3G.plist using uid: 0 gid: 0, synthetic_euid: 501 egid: 0

I forgot to mention this is on iPad that it is crashing. Works fine in sim, and worked in older Corona versions.

Could you please file this as a bug using the link in the top right corner?

Peach :)