The issue can be easily reproduced with a slightly modified Repository Categories example. I've only added a dummy page and installer script to component B. Please check the attached archive.

Steps to reproduce:

1. Build the online repository and installer binary as described in README.
2. Run the installer.
3. Proceed to Select Components page and click Filter button.
4. The installer crashes after fetching remote packages.

If I comment out creation of dynamic page in packages/B/meta/installscript.js, the installer works fine.

The crash seems to happen in PackageManagerPage::nextId(). Basically it tries to call component->licenses() on already destroyed component. Quick bisecting indicates that the issue was first introduced in 5057521 between 4.5.1 and 4.5.2.