NFD

The handler connected to the Face::afterStateChange signal blindly dereferences the pointer returned by FaceTable::get(), which may be null if the face has already been removed from the table. This can happen when newState == CLOSED.

In practice, this doesn't cause a segfault because the dereferenced null pointer is not actually used in that case. Nevertheless, it's still undefined behavior.