From Philippe:

TBuffer::MapObject can be called with a pointer worth '-1' in some cases.  Without the
case, it tries to dereferences the pointer and of course crashes.


git-svn-id: http://root.cern.ch/svn/root/trunk@6497 27541ba8-7e3a-0410-8455-c3a389f83636