Fixed in rev 54925 to raise SyntaxError instead of crashing.

The bug appears to have been present in the original nonlocal code - both the original code and the refactored code checked if a nonlocal variable was in the set of bound names without first checking that the relevant pointer was non-NULL.